add sha1 as most certs dont have sha256 yet