To be clear, the self-signature on a root certificate is meaningless (it only exists so that root certificates can be parsed with the same code as intermediate

To be clear, the self-signature on a root certificate is meaningless (it only exists so that root certificates can be parsed with the same code as intermediate and leaf certificates); using SHA-1 there is not a risk. https://www.entrust.com/blog/2014/04/need-sha-2-signed-root-certificates/ https://www.entrust.com/blog/2014/04/need-sha-2-signed-root-...