SSL certificates are signed using a one-way hash â usually SHA-1. Which is too bad, because SHA-1 is becoming dangerously weak. It's time to upgrade to SHA-2. Getting a SHA-2 certificate You'll need to generate a new certificate request, and get your CA to issue you a new certificate using SHA-2. Using your existing private key: openssl req -new -sha256 -key your-private.key -out your-domain.csr S
{{#tags}}- {{label}}
{{/tags}}