hjkhghtjhjjhjhjhjhjjhjhjjhrrtrtoirh

# This is an example subpolicy dropping the SHA1 hash and signature support hash = -SHA1 sign = -*-SHA1 sha1_in_certs = 0