Updates cert type to SHA-2 and leaves term at 3 years.