https://vstellar.com/2017/11/replacing-vsphere-6-0-certificates-using-vmca-as-a-subordinate-ca/