correct sha256 checksum