easycert: Explain that we don't need the -sha256 option.