thumbprintAlgorithm

This must match the first portion of the certificate name. Currently required to be 'SHA1'.