easycert: Also warn about old SHA-1 certificates.