Update certs to sha256 signed ones