Certificate error with latest Java 8

Certificate is rejected as it is signed with a weak hashing algorithm (MD5). Settings must have changed recently, as this only became evident after updating JRE/JDK.

Either way, the solution is to regenerate the demo keystore we ship, with identical passphrases but using newer SHA256.