sha1 certificates are deprecated. The web browser Google Chrome shows a red security warning for the website https://sha1-2017.badssl.com/ (sha1 certificate expires in 2017). It shows neutral (neither green padlock nor red warning) for https://sha1-2016.badssl.com/ . Otherwise the pages load normally.
I read http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspx but don't understand Microsoft's policy. Will Internet Explorer eventually refuse these certificates too? When exactly, and how so—what will it look like? An address bar warning like Chrome, or a scary interstitial ?
The two websites load without warnings in Firefox 41, but I understand Mozilla plan to introduce "This Connection is Untrusted" interstitials from Firefox 43. https://blog.mozilla.org/security/2015/10/20/continuing-to-phase-out-sha-1-certificates/