Certification Authorities that have not moved to a more secure cryptographic hash function than MD5 have come under fire in the security world.