How to update your NASH certificate from SHA-1 to SHA-2?