new hash format in av_certs.rb