Hello,
Thank you so much for posting here.
Here is the reference: https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/sha1-key-migration-to-sha256-for-a-two-tier-pki-hierarchy/ba-p/400338
Hope the information is helpful. For any question, please contact us.
Best regards,
Hannah Xiong