support SHA-384 in certificates, fixes #53