For ESXi 6.0 and later hosts that are in VMCA mode or custom mode, you can view certificate details from the vSphere Web Client. The information about the certificate can be helpful for debugging.


  1. Browse to the host in the vSphere Web Client inventory.
  2. Click the Manage tab and click Settings.
  3. Select System, and click Certificate.
    You can examine the following information. This information is available only in the single-host view.
    Field Description
    Subject The subject used during certificate generation.
    Issuer The issuer of the certificate.
    Valid From Date on which the certificate was generated.
    Valid To Date on which the certificate expires.
    Status Status of the certificate, one of the following.
    Normal operation.
    Certificate will expire soon.
    Expiring shortly
    Certificate is 8 months or less away from expiration (Default).
    Expiration imminent
    Certificate is 2 months or less away from expiration (Default).
    Certificate is not valid because it expired.