[mistaken]

The site also seems to flag RSA host keys. Using SHA1 in this case shouldn't be a security issue since the hash is calculated as SHA1(SHA2(x)) and you would need to break SHA2 as well. [1]

[1] - https://stribika.github.io/2015/01/04/secure-secure-shell.ht...