Use SHA-256 in sample certs -- SHA-1 is deprecated for certs.