18.2.2. Generation of a Certificate 
With the function Automatic SPE Configuration of the DLS it
is possible to generate a certificate and to distribute it to the gateways
and endpoints. This is especially useful when there is no client PKI.
For more information please refer to Chapter
8, “AutoSPE Configuration (DLS)”.
Alternatively, a certificate can be generated on a common gateway
board.
For manually generated certificates (PKCS#12 file) in case of STMI4/STMIX/STMIY/NCUI4
boards, the signature algorithm SHA-1 or SHA-2 (recommended) can be used.
Term SHA-2 (SHA2) means the whole family of SHA-2 algorithms, i.e.
SHA-256, SHA-384, SHA-512 and SHA-224
IMPORTANT:
Supported Key Length is 4096 bit, but for STMI2/4
boards is Maximum Key Length 2048 bit.