Testsuite: move CRL testcases away from using SHA1-signed certs