OcspHashAlgorithm
Hash algorithm used to compute OCSP CertID fields. RFC 9919 §3.1.1 requires SHA-256 for conforming clients; RFC 6960 defines no default.
type OcspHashAlgorithm = "SHA-1" | "SHA-256"