Comment by pbsd

There were certificates (including a root CA) using MD2 until recently. MD2 itself was only retired in 2011 [1].

https://www.rfc-editor.org/rfc/rfc6149.txt