We've been able to install user certs on our 7925 phones for years, using our MS 2012r2 server CA, with a SHA-1 server cert.  We recently upgraded our CA server's cert to SHA-256.  Now when we try to generate a CSR from a 7925, the phone always prese...