Use SHA-2 (SHA-512) to store the certificate fingerprint instead of SHA-1

Because SHA-1 is not really relevant anymore.
Too bad it's significantly longer and tiring to check, even if that is
to be expected.