blog.pierky.com
SHA-1 sunset: valid SHA-2 chains treated as insecure - Pierky's Blog
A problem with mixed SHA-1/SHA-2 intermediate subordinate CAs may bring properly SHA-2 certificates and chains to be treated as insecure.
