And onion urls are a sha hash of i think the private key of the site

They contain the full key now which is why they are longer. Apparently it was necessary to fix the vulnerabilities in the previous version.

Public key obviously, not private.