Document problems with SHA-1 in certs with DANE-TA