MKCertificate: support for both SHA1 and SHA256 digests.