For ESXi 6.0 and later hosts that are in VMCA mode or custom mode, you can view certificate details from the vSphere Web Client. The information about the certificate can be helpful for debugging.

1

Browse to the host in the vSphere Web Client inventory.

2

Click the Manage tab and click Settings.

3

Select System, and click Certificate.

You can examine the following information. This information is available only in the single-host view.

Field

Description

Subject

The subject used during certificate generation.

Issuer

The issuer of the certificate.

Valid From

Date on which the certificate was generated.

Valid To

Date on which the certificate expires.

Status

Status of the certificate, one of the following.

Good

Normal operation.

Expiring

Certificate will expire soon.

Expiring shortly

Certificate is 8 months or less away from expiration (Default).

Expiration imminent

Certificate is 2 months or less away from expiration (Default).

Expired

Certificate is not valid because it expired.