http://tsoorad.blogspot.com/2015/07/windows-pki-sha-1-to-sha-2.html?spref=tw