trust anchor digest updates
remove double TLSA search-and-replace-whoops.