spec: TLS certificates: avoid MD5