Q: Should I update my SHA-1 certificates? If so, how?
Recently I noticed the "https:" has a red strike-through and warning in Chrome, but only on certain websites. Apparently this has been attributed to Google sunsetting SHA-1. A few comments here suggest getting the certificate re-issued in SHA-2.
How do I get the certificate re-issued? Without much knowledge in web security, I'd prefer to hear it from a trusted source (here), as opposed to following instructions from some website I don't know I can trust.
Take Wikipedia: clicking the https in chrome, I see I'm using SHA-1 via a certificate GlobalSign Organization. But shaaaaaaaaaaaaa.com/check/wikipedia.org suggests that Wikipedia does have an SHA-2 certificate, so I don't think this is an issue with Wikipedia. How do I use the other?
I have verified the browsers are up to date, and cache is cleared, Firefox is using the same certificate as Chrome. However, the current certificate used is signed by GlobalSign, the one on the shaaaa website is signed by SSL Labs.