I know, that signature check really only applies if you are buying long lived certs as otherwise it'll be updated in your next renewal (which is the situation we're in).
Though, you're probably right that I should upgrade it sooner (see, the scanner is working and forcing people to upgrade - including myself).
I also don't pass that test, but I don't know how to fix it. Something that bugs me about both this and the SSL Labs scanner is there's no guide to fixing problems. Obviously it's different from webserver to webserver, but I feel like at least Nginx and Apache suggestions should be there. Maybe lighttpd and whatever else kids are using now a days
Though, you're probably right that I should upgrade it sooner (see, the scanner is working and forcing people to upgrade - including myself).