when generating SSL CSRs, using SHA256 as SHA1 is being phased out, per @konklone