For more information on generating certificate requests and certificates, additional notes, and optional configurations using the vSphere Certificate Manager utility, refer to the following:

• How to use vSphere 6.x (2097936)
• Configuring the vSphere 6.0 U1b or later VMware Certificate Authority as a Subordinate Certificate Authority (2147542)
• Replacing default certificates with CA-signed SSL certificates in vSphere 6.x (2111219)
• How to download and install vCenter server root certificates to avoid web browser certificate warnings (2108294)