script now fetches sha-256 certificates, checked by ssllabs.com