so, if you ever encounter a certificate issue in vcsa, there's no need to restore from backups (snapshots) or whatev. you can pretty much resolve everything with /usr/lib/vmware-vmca/bin/certificate-manager. don't follow any of those stupid articles or kb sites, because this is simply a java (bouncycastle) fragility^Wstupidity.
vmware vcenter java