make sure cert request is for SHA256 cert -- SHA1 is deprecated