WordPress is dropping 1024-bit certificates from core
The core team wants the legacy 1024-bit certificates out of the WordPress root bundle before 7.0 ships in April 2026. NIST disallowed those keys in 2013, and CentOS 7, the main reason they stayed, went end of life in mid-2024.