Obviously, SHA-1 isn’t as broken as MD5, but experts in the field have recommended for some time that it should not be used beyond 2010.  To this end NIST has sponsored a competition to select a new algorithm which will become SHA-3.  The competition closed on October 31 2008 and a total of 64 entries were received of which 51 were assessed as meeting the initial criteria.  A final decision is expected in 2012.

Right now, there is nothing agreed to move forward in the short term.  Although Bruce Schneier, quoted elsewhere noted that this entire point is rather moot as users (and browsers) rarely check the validity of certificates in any situation.