certool: use sha1 as digest