The security of your environment depends on the validity and trust of the SDDC component certificates. Replace a component certificate if the certificate is expiring or compromised, or some of the certificate attributes, such as the host or organization name, must be changed.
