Apparently this has something to do with the version of OS on the ASA. I found that later releases are hashed with SHA1. This one is running 8.0.
If someone has a way to do it without having to either upgrade the OS or obtain a CA, that would be great.