http://arstechnica.com/information-technology/2015/12/google-considers-following-mozilla-microsoft-and-dropping-sha-1-certificates-early/