diff --git a/doc/ircd.conf.example b/doc/ircd.conf.example
index 5d7f984e2..1e11bd6ff 100644
--- a/doc/ircd.conf.example
+++ b/doc/ircd.conf.example
@@ -614,7 +614,7 @@ general {
 	throttle_count = 4;
 	max_ratelimit_tokens = 30;
 	away_interval = 30;
-	certfp_method = sha1;
+	certfp_method = spki_sha256;
 	hide_opers_in_whois = no;
 };
 
diff --git a/doc/reference.conf b/doc/reference.conf
index d0720a57d..d0b17bb0a 100644
--- a/doc/reference.conf
+++ b/doc/reference.conf
@@ -1410,7 +1410,7 @@ general {
 	 * constant even if the certificate is reissued.  These fingerprints will be prefixed with
 	 * "SPKI:SHA2-256:" or "SPKI:SHA2-512:" depending on the hash type.
 	 */
-	certfp_method = sha1;
+	certfp_method = spki_sha256;
 
 	/* hide_opers_in_whois: if set to YES, then oper status will be hidden in /WHOIS output. */
 	hide_opers_in_whois = no;