Merge "Switch from SHA-1 to SHA-256 for new signing key certs."