I purchased SSL certificate from Gogetssl.com. The Comodo Essential SSL is a good deal on the list. I paid it $37.45 for FIVE years. OK back to the title. 1) The CSR generator online is default sha1. Use my own openssl command to generate sha256 CSR, KEY files. There are so many articles related sha1