fix fingerprint; switch down to sha256