i have a id_rsa (private key which is used by me to authentication and encryption together with cert on yubikey piv smardcart provider on slot 9a) now i wish to use this key to create a pkcs12 keystore (private key + self signed cert) to sign jar files (android apk) via other slot on yubikey piv 

i have created pkcs store this way:

    $ openssl req -new -key id_rsa -out server.csr 
    $ openssl x509 -req -days 3650 -in server.csr -signkey id_rsa -out server.crt
    $ openssl pkcs12 -keypbe PBE-SHA1-3DES -certpbe PBE-SHA1-3DES -export -in server.crt -inkey id_rsa -out server.crt.p12 -name "Singnin cert"
 
and when i try upload those pkcs12 (or as separate key/cert) to slot 9c via :
    
Import the key and cert, do one of the below:

 - Import the key and cert (PEM format) in slot 9a:

          $ yubico-piv-tool -s 9a -a import-key -i key.pem
  $ yubico-piv-tool -s 9a -a import-certificate -i cert.pem

 - Import the key and cert (PKCS12 format) in slot 9a:

          $ yubico-piv-tool -s 9a -a import-key -a import-cert -i key.p12 -K PKCS12

i get error 

    Enter Password: 
    Invalid public exponent for import (only 0x10001 supported)
    Unable to import private key


ps. i use management key 

i have tried convert id_rsa to to pkcs8  or remove pasphrase 

could anyone explain me what is this error about ?  i have google about this but with no luck 

my idr_rsa 

    -----BEGIN RSA PRIVATE KEY-----
    Proc-Type: 4,ENCRYPTED
    DEK-Info: DES-EDE3-CBC,[some numbers I've cut]



YUBIKEY PIV certificate slots

A PIV-enabled YubiKey holds 4 distinct slots for certificates, as specified in the PIV standards document. Each of these slots is capable of holding an X.509 certificate, together with its accompanying private key. Technically these four slots are very similar, but they are used for different purposes.

Slot 9a: PIV Authentication
This certificate and its associated private key is used to authenticate the card and the cardholder. This slot is used for things like system login. The end user PIN is required to perform any private key operations. Once the PIN has been provided successfully, multiple private key operations may be performed without additional cardholder consent.

Slot 9c: Digital Signature
This certificate and its associated private key is used for digital signatures for the purpose of document signing, or signing files and executables. The end user PIN is required to perform any private key operations. The PIN must be submitted every time immediately before a sign operation, to ensure cardholder participation for every digital signature generated.

Slot 9d: Key Management
This certificate and its associated private key is used for encryption for the purpose of confidentiality. This slot is used for things like encrypting e-mails or files. The end user PIN is required to perform any private key operations. Once the PIN has been provided successfully, multiple private key operations may be performed without additional cardholder consent.

Slot 9e: Card Authentication
This certificate and its associated private key is used to support additional physical access applications, such as providing physical access to buildings via PIV-enabled door locks. The end user PIN is NOT required to perform private key operations for this slot.

i have read: 

https://crypto.stackexchange.com/questions/3110/impacts-of-not-using-rsa-exponent-of-65537

https://crypto.stackexchange.com/questions/10809/openssl-rsa-how-many-public-exponents-are-possible

https://security.stackexchange.com/questions/2335/should-rsa-public-exponent-be-only-in-3-5-17-257-or-65537-due-to-security-c

http://stackoverflow.com/questions/10736382/what-does-e-is-65537-0x10001-mean

ps. i have dump txt via  

    $ openssl rsa -text -in id_rsa

and there is 

    publicExponent: 37 (0x25)


is there a way to change the public exponent to 0x10001? or do i have generate new key ;/ and all certificates from scratch ?

ps2. 

 i have dig out such a text about possibility but no further explanation 

https://crypto.stackexchange.com/questions/30316/is-it-possible-to-correct-the-exponent-of-an-rsa-public-key-if-it-has-been-alter