Weak hashing algorithm

  • (Error) "An unknown hashing algorithm was used to sign the certificate."
  • (Warning) "A weak hashing algorithm was used to sign the certificate."

Problem

Continued use of weak hashing algorithms certificates puts your clients' sensitive data at risk and will cause browsers to display warnings. Warnings create mistrust when connecting to a site and can cause clients to avoid your site.

Hashing algorithms are used to generate SSL Certificates. Discovery checks your SSL/TLS certificate as well as its issuing intermediate certificate.

Algorithms once thought of as secure and unbreakable have become either weak or breakable. For example, MD5 once thought to be a secure and unbreakable hashing algorithm went from being a strong hashing algorithm to a weak hashing algorithm to a broken hashing algorithm.

Solution

Reissue or renew your certificate using a supported hashing algorithm, such as SHA-2.

About

DigiCert is the world’s premier provider of high—assurance digital certificates—providing trusted SSL, private and managed PKI deployments, and device certificates for the emerging IoT market. Since our founding almost fifteen years ago, we’ve been driven by the idea of finding a better way. A better way to provide authentication on the internet. A better way to tailor solutions to our customer’s needs. Now, we’ve added Symantec’s experience and talent to our legacy of innovation to find a better way to lead the industry forward, and build greater trust in identity and digital interactions.

©2019 DigiCert, Inc. All rights reserved. DigiCert and its logo are registered trademarks of DigiCert, Inc. Symantec and Norton and their logos are trademarks used under license from Symantec Corporation. Other names may be trademarks of their respective owners.