We are signing with SHA256 RSA, not SHA1