For TLS 1.3 reject SHA1 TLS signatures