For ESXi 6.0 and later hosts that are in VMCA mode or custom mode, you can view certificate details from the vSphere Client. The information about the certificate can be helpful for debugging.


  1. Browse to the host in the vSphere Client inventory.
  2. Click Configure.
  3. Under System, click Certificate.
    You can examine the following information. This information is available only in the single-host view.
    Field Description
    Subject The subject used during certificate generation.
    Issuer The issuer of the certificate.
    Valid From Date on which the certificate was generated.
    Valid To Date on which the certificate expires.
    Status Status of the certificate, one of the following.
    Normal operation.
    Certificate expires soon.
    Expiring shortly
    Certificate is eight months or less away from expiration (Default).
    Expiration imminent
    Certificate is two months or less away from expiration (Default).
    Certificate is not valid because it expired.