Yes I know these are very old servers and technically we should move away from CAS altogether. But unfortunately this is an environment i inherited and am now dealing with the issues.  Due to the requirement to move away from sha-1 signed certificate...