[arch-devops] Upgrade SSL CAs to SHA-2