sha256WithRSAEncryption certificates - should this work