as many systems in the world still default to create SHA-1 certs if hash algorithm is not specified explicitly.