fix Signer hash size w/o SHA, fix GetCA caList b4 lock