- php `openssl_verify` uses SHA1 as default signing algorithm
- generate PDFs with different content but identical SHA1 hash with [sha1collider](https://github.com/nneonneo/sha1collider)