September 2014
Removal of SHA-1 Certificates
Most SSL certificates issued today are created with a hash algorithm called SHA-1, which is now almost 20 years old.
With advances in hardware and therefore computing power, the feasibility of successful collision attacks is increasing.
Therefore CAs should begin to use a stronger SHA version, particularly SHA-2 (or SHA-256).
SHA1 SSL certificates will still be available for compatibility reasons, but only if requested, and cannot be used for any certificate which expires after 1st January 2017.
With advances in hardware and therefore computing power, the feasibility of successful collision attacks is increasing.
Therefore CAs should begin to use a stronger SHA version, particularly SHA-2 (or SHA-256).
SHA1 SSL certificates will still be available for compatibility reasons, but only if requested, and cannot be used for any certificate which expires after 1st January 2017.