Moved away from sha1 certificates to sha256.

Added some subjectAltName changes to adhere better to pkix. Not yet finished.