I have replaced the digicert SSL certificate on each of our Exchange and CAS servers with a SHA2 certificate, however, OWA is still reporting it uses a SHA1 certificate.
Looking in the ECP console under Servers > Certificates, I see each server has the digicert certificate plus 3 self signed certs, all of the self signed are SHA1 (see image)
How do I replace these with SHA2 and which of them is the one used by OWA?