Hi, i added a verisign root certificate in the troubleshooting section. This cert is signed with an md2 hashing algorithm, as mentioned on the 26c3 in berlin 2009. It's still enabled by default for WEB, Email and other. I strongly suggest to remove it, like anyone else did. Interesstingly, the cryto shell extention from windows says sha1 , but openssl does not mention sha1 at all. I think openssl is right :)