This morning, I am 
Clean install on a new FQDN. I only applied the root cert tweak
sed -i 's|$bundle = $b|//$bundle = $b|g' /var/www/html/admin/modules/certman/Certman.class.php
Error 408, no go.
Reverted the snapshot and only applied the key size change.
sed -i 's/4096/2048/g' /var/www/html/admin/modules/certman/vendor/analogic/lescript/Lescript.php
The device will pull the config.
