Why does a TSS GENREQ command generate an SHA1 digital certificate?