In this article, How to Install Certificate Services with SHA-256 a.k.a SHA-2 in Server 2012 R2. Please refer Microsoft Article for more...

Below is the issue faced by one my client last week that they are not able to provide the certificates with more than 5 years validity...