used sha256 for the certificates