TLSEXT_hash_sha256
{ "SHA256", TLSEXT_hash_sha256 /* 4 */ },
sct->hash_alg = TLSEXT_hash_sha256;
if (sct->hash_alg == TLSEXT_hash_sha256) {