For TLS < 1.2 use default digest for client certificate