Hello,
i recommend thag you run a repair on youf servers from SIM, deselect all options except the Trust option snd choose the 4096 bits version. If the destination smh does not support the 4096 the repair will downgrade to 2048 or 1024 bits certificate versions.
do you know how and where to find the repair option?