use SHA256 (via OpenSSL) instead of SHA1 when generating a hash for server keys+SCTs