With very little effort I replaced my existing SSL cert which was SHA-1 based with a SHA-256 version for free.
The SHA-1 Sunset Tool makes it easy to find all of your SHA-1 certificates. Enter your domain name to find affected certificates and upgrade to SHA-256 with a free DigiCert certificate.
via DigiCert SHA-1 Sunset Tool: Find & Replace SHA-1 Certificates.
It’s a neat offer. I could have asked my existing SSL cert provider but I wanted to see how well this works. The instructions and validation steps were very simple.