It’s a great command reference when you working with certificate issues And I will add this section when you working with STS certificate : https://kb.vmware.com/s/article/79248 - Check STS Certificate expiry on VCSA & Windows VC https://kb.vmware.com/s/article/76719 - Replace STS Certificate on VCSA https://kb.vmware.com/s/article/79263 - Replace STS Certificate on Windows VC If you need to get a quick summary for all Cert use a bellow command #for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo "[*] Store :" $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $store --text | grep -ie "Alias" -ie "Not After";done Check this pdf https://file.io/vCxR7K4vms0q