>(using SHA-1)

You mentioned why - and it's already known why. Not much discussion to be had here... it shouldn't be a huge surprise that no exceptions are being made.

Well apparently HP doesn't know how to update their security, or doesn't care

Which probably means it expires in 2016.