As the "encryption information" in your info box indicates, you still use SHA-1 as a hash. SHA-1 is being deprecated and first collision attacks have been shown (https://shattered.it/). Of course, it is not yet broken for your use case, because that would likely require a pre-image attack, but it's better to move away from it *now*. AFAIK in HTTPS they are already deprecated, so you should do the same.
SHA-1 is only used for the certificate fingerprint, the encryption itself does not use SHA-1
Okay, that's good to hear, but anyway, that's still a thing to move away from. Also HTTPS certificates signed by CAs must not use SHA-1 anymore. They have reasons to do so. :)