Add options to check TLS signing hashes