The pasted certificate or request is signed with SHA-1 or MD5.

PEM_WEAK_SIGNATURE · Severity: Warning

• WarningPEM_WEAK_SIGNATURE

  The pasted certificate or request is signed with SHA-1 or MD5.

  Collisions have been shown for both hash functions, and clients reject TLS certificates signed with them. A request signed this way is refused by public certificate authorities.

  Recommendation: Sign with SHA-256 or stronger.

Reported by

• CSR decoder
• PEM certificate decoder

Available through the API

• CSR decoder API
• PEM certificate decoder API

Related findings

• Warning PEM_WEAK_KEY The pasted certificate or request uses a weak public key.
• Error PEM_INVALID The PEM block cannot be decoded.
• Info PEM_PERSONAL_DATA_OMITTED Email addresses and personal name types were left out of the result.

All findings