Error: CA signature digest algorithm too weak

[xiic]

On newer systems, I'm getting an error "CA signature digest algorithm too weak" when executing a request after importing the bundle, as there are some certificates in there using SHA1WithRSA as digest algorithms.

This even happens when trying to connect to a server using strong intermediate/root certificates, a single weak digest in the pem files is sufficient to break it.