PFsense+Squid3-ssl bump cetificate signed only SHA1