implementing new option --sha256 for SHA256 CSR