3

We are using SHA1 for now, and we are required to apply new HTTPS certificate which supports SHA2.

Can I deploy SHA2 certificates directly to production environment? Do I need to test it? What problems will I encounter?

Improve this question
1
  • It is a high quality question with a high quality answer. There is no reason to close it.
    – peterh
    May 1, 2015 at 1:11

1 Answer 1

Reset to default
6

SHA-2 (commonly SHA-256) signed certificates should be compatible with most recent systems. Certain older operating systems (Server 2003, XP SP2) and browsers (Chrome 25, Opera 8, IE5) do not support them, but as long as you are running anything from the last decade you should be okay.

DigiCert has a fairly comprehensive guide on SHA-2 compatibility available at their site:

SHA-2 Compatibility | Digicert

All in all, it's not much of a choice. CAs will stop issuing SHA-1 signed certificates soon, and most browsers will begin to give errors for SHA-1 signed certificates.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .