As per your own support article (https://www.symantec.com/theme/sha2-transition) you understand that SHA-1 algorithms are not secure. Please update the certs in Symantec Endpoint Manager to SHA-2 in your next release.
(Note: I undertsand that this process can currently be done by a system administrator, but the current documentation, is very general and not specific about the process. I have no capacity to create a new develpoment server to test this migration or make the change on our production server without greater assurances that it will not cause errors or interruptions in service)
Thank you,
Sean