Previous discussion on SHA-1 certificate sunsetting: https://news.ycombinator.com/item?id=12734970