Self-signed GUI certificate does not get upgraded to SHA2 during software upgrade