default sha256 instead of sha1

- Notice: there are several security related issues known with SHA1. So I
  decided to make SHA256 default for new certificates (requests). Note that some
  operating systems and browser versions do not support SHA1 (some old
  IE/Windows versions I guess)