use sha256 instead of sha1 for the server certificate hash