My side project tries to give secure default settings for all major webservers and other software (like haproxy, mysql, mailservers etc): <a href="https:&#x2F;&#x2F;cipherli.st&#x2F;" rel="nofollow">https:&#x2F;&#x2F;cipherli.st&#x2F;</a><p>From the start it has listed the suggestion to set up &gt;SHA256 keys.<p>If you want to test your site for a SHA 1 cert, you can try my other side project: <a href="https:&#x2F;&#x2F;ssldecoder.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;ssldecoder.org&#x2F;</a> - you can also use the SSL labs test but mine is faster for just testing certificate type. (And it&#x27;s open source, so you can use it internally as well).<p>Mozilla also has a good wiki page for SSL recommended settings: <a href="https:&#x2F;&#x2F;wiki.mozilla.org&#x2F;Security&#x2F;Server_Side_TLS" rel="nofollow">https:&#x2F;&#x2F;wiki.mozilla.org&#x2F;Security&#x2F;Server_Side_TLS</a>