use sha256 for certs

hope this works :)