2 things....

1. Thanks to chris-ind for the helpful post that clarifies the issue for us.

2. The response to our second ticket with ServiceNow is almost word for word identical with the response posted by chris-ind.

Special Note:   I checked the setting for the system property "com.snc.kmf.signature.validation.flag" and it is false.  So that means that we don't even have the feature that is protected by this cert.  So we plan to ignore this one too.