* Better creation of self-signed certificates. Patch by Anton (@odisey1245). Fixes issue #40553

packages/fcl-net/src/sslbase.pp

@@ -220,7 +220,7 @@ function TX509Certificate.GetKeySize: Integer;
 begin
   Result:=FKeySize;
   if Result=0 then
-    Result:=1024;
+    Result:=2048;
 end;
 
 function TX509Certificate.GetValidFrom: TDateTime;

packages/openssl/src/fpopenssl.pp

@@ -244,9 +244,9 @@ var
 begin
   Utc:=Asn1UtctimeNew;
   try
-    ASN1UtcTimeSetString(Utc,PAnsiChar(FormatDateTime('YYMMDDHHNNSS',ValidFrom)));
+    ASN1UtcTimeSetString(Utc,PAnsiChar(FormatDateTime('YYMMDDHHNNSS"Z"',ValidFrom)));
     X509SetNotBefore(x, Utc);
-    ASN1UtcTimeSetString(Utc,PAnsiChar(FormatDateTime('YYMMDDHHNNSS',ValidTo)));
+    ASN1UtcTimeSetString(Utc,PAnsiChar(FormatDateTime('YYMMDDHHNNSS"Z"',ValidTo)));
     X509SetNotAfter(x,Utc);
   finally
     Asn1UtctimeFree(Utc);