Updating larger numbers of SSL certificates and keys

We have an internal CA to sign certificates for non-public sites (and we got a few hundred virtual servers). When this CA was setup, keys were generated with MD5, which is considered insecure and bro...