Symantec cannot handle SHA-2 and breaks Windows 7 and Server 2008 R2

Microsoft withholding updates from machines with Symantec software, because it cannot handle SHA-2 certificates and does stupid things.
This is a companion discussion topic for the original entry at https://www.zdnet.com/article/symantec-cannot-handle-sha-2-and-breaks-windows-7-and-server-2008-r2/#ftag=RSSbaffb68