No support for SHA2 as a signature algorithm. SHA1 gets deprecated in 2016.
I've just released a new version of gnoMint that signs its certificates with SHA...