Google Chrome doesn't even like HP's security certificate (using SHA-1)

You mentioned why - and it's already known why. Not much discussion to be had here... it shouldn't be a huge surprise that no exceptions are being made.