I'd suggest using a hash directly in the certs attribute, like so

```json
{
  "cacert": {
    "certs": {
      "my.ca.cert.org": {
        "source": "https://my.ca.cert.org/certs/root.crt",
        "cert_dir": "/etc/ssl/certs",
        "hash": "492ffc07"
    }
}
```

Using the key of the hash as the `name_attribute`. Any objections?