server certificates to use a sha256 hash by default

We'll use a FIPS-140 compliant hashing algorithm
in client certificates.