From what I understand SSL3 is still secured but Microsoft, DOD and Semantic want to move to TLS before SSL3 is considered hacked and unsecured. For folks that take payment cards the recommended minimum is TLS1.2 and the date for PCI compliance is drawing close.
As for certificates, SHA128 is...