Change inconsistent "SHA" uses to "OID"
Just use the ref's OID directly.