[Pki-users] Requiring the Hash Algorithm SHA-2 on server certificates