Sunset all remaining use of SHA-1 in Certificates and CRLs.
For Sunset all remaining use of SHA-1 in Certificates and CRLs., requirement is Sunset all remaining use of SHA-1 in Certificates and CRLs; effective date is 2026-09-15; baseline requirements section is 7.1.3.2.1; authority is CA/Browser Forum TLS Baseline Requirements; scope is all publicly-trusted CAs issuing TLS server certificates, recorded from its source on 2026-08-05.
- Requirement
- Sunset all remaining use of SHA-1 in Certificates and CRLs. verified
- Effective date
- 2026-09-15 verified
- Baseline Requirements section
- 7.1.3.2.1 verified
- Authority
- CA/Browser Forum TLS Baseline Requirements our reading
- Scope
- all publicly-trusted CAs issuing TLS server certificates our reading
Values marked our reading are our classification of what the source says — the source does not print them in those words. The quote below is the evidence for each one; judge it yourself.
What the source says
2026-09-15 | 7.1.3.2.1 | Sunset all remaining use of SHA-1 in Certificates and CRLs.
— cabforum.org, retrieved 2026-08-05
Source
- cabforum.orghttps://cabforum.org/working-groups/server/baseline-requirements/requirements/