Squid still accepts sha1 certificates