A certificate in the chain is signed with SHA-1 or MD5.

TLS_WEAK_SIGNATURE · Severity: Warning

• WarningTLS_WEAK_SIGNATURE

  A certificate in the chain is signed with SHA-1 or MD5.

  Collisions have been demonstrated for SHA-1 and MD5, and clients no longer accept certificates signed with them. A root certificate's own signature is not checked, because clients trust the root directly.

  Recommendation: Replace the certificate with one signed with SHA-256 or stronger.

Reported by

• Site health check
• TLS certificate check

Available through the API

• Site health check API
• TLS certificate check API

Related findings

• Warning TLS_WEAK_KEY The TLS certificate uses a weak public key.
• Error TLS_CERT_EXPIRED The TLS certificate has expired.
• Info TLS_CERT_EXPIRING The TLS certificate expires within 30 days.
• Warning TLS_CERT_EXPIRING_SOON The TLS certificate expires in less than 14 days.
• Error TLS_HOSTNAME_MISMATCH The TLS certificate is not valid for the domain name.
• Error TLS_UNAVAILABLE No TLS connection to the domain on port 443 could be made.

All findings