It's telling openssl to sign the CSR with sha256, making it much harder for somebody to modify your CSR in transit to the CA. That's ok, but that's not relevan

It's telling openssl to sign the CSR with sha256, making it much harder for somebody to modify your CSR in transit to the CA. That's ok, but that's not relevant at all what the resulting certificate is concerned.