TLS-SHA1
Certificate signed with SHA-1
What it means
SHA-1 signatures are considered forgeable and browsers reject publicly trusted SHA-1 certificates.
How to fix it
- 1Reissue the certificate; every public CA now signs with SHA-256.
Re-check after the change
DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.