Use SHA-256 for signing certificates.