#5992: Create new fedora-ca certificates without SHA1