Allow signing certs/csrs using alternate message digest.