MD5 is still legit for hashing passwords.

You don't want to use it in an SSL cert though as someone could then masquerade as you.