re: 2048 bit csr.

The old private key is not replaced if it already exists, so to force it 
to create a 2048 bit key delete your existing surge_priv.pem file first 
then recreate the priv file and csr

ChrisP