I was able to solve the issue by enrolling and authenticating the ASA with an internal CA, configuring internal DNS to point to the common name used in the cert, and using the hostname in ASDM (similar to harold's solution but using internal issued cert rather than external cert).
There are few interoperability issues between 2960x and other vendors.
In this article we will go over the steps on how to debug these issues.
Check the phy id from “show controllers ethernet-controller phy” output.
It appears that you are trying to access end of life information from
Cisco search. We have detected a problem with your script ("eol...) and
would like to help. Please contact email@example.com if you would
Cisco Licensing is pleased to announce the new Licensing Portal. It
provides customers with an enhanced self-service experience by
stream-lining and automating many licensing activities. Please take a
moment to familiarize yourself with the features that ...