allow choice of digest algorithm in certificate generation