Update openssl chapter based on modern certificate requirements

All Certificate Authorities now require 2048 bit keys with SHA256 hashes
This change brings our documentation inline with that requirement

PR: 199379
Submitted by: Roland van Laar <roland@micite.net> (original)
Approved by: wblock (mentor)
Differential Revision: https://reviews.freebsd.org/D2836