Worth noting that Facebook stopped offering SHA-1 back in November[1]. Cloudflare still offers SHA-1 for paying customers (via a root certificate pulled from tr

Worth noting that Facebook stopped offering SHA-1 back in November[1]. Cloudflare still offers SHA-1 for paying customers (via a root certificate pulled from trust stores, i.e. which are only supported on outdated devices/browsers). Not sure about Twitter. [1]: https://www.facebook.com/notes/protect-the-graph/retiring-sha-1-certificates/1814716098768533 https://www.facebook.com/notes/protect-the-graph/retiring-sh...