What about a 2048-bit certificate for LEM?
"You attempted to reach swi-lem, but the server presented a certificate signed using a weak signature algorithm. This means that the security credentials the server presented could have been forged, and the server may not be the server you expected (you may be communicating with an attacker)"
"Your connection to swi-lem is encrypted with 128-bit encryption."