Qualys SSL Labs Weak or insecure signature

@rugk is CBC that bad?