Sagepay gateway SHA-256 (SHA-2) certificates

Hi Dermod,

In accordance to PCI DSS (Payment Card Industry Data Security Standard) SSL certificates with SHA1 are no longer considered secure.

I have just checked your website and it only uses http which doesn’t require any SSL certificates.

In which case, you are not affected by that requirement from the Client –> Server perspective.

I have just had a quick look at the integration document from sage and I can’t find any requirement for your site to run https:
https://www.sagepay.co.uk/file/25041/download-document/FORM_Integration_and_Protocol_Guidelines_270815.pdf?token=A6jsLclF3uqePWxt1Y1tn3O7xijcEVOKeoJbCEdAQdA

I think you are fine.

Paul

Many thanks for looking into this Paul.

Best wishes

Dermod