Starting with vSphere 6.7 Update 2, you can use the

vSphere Automation

API to manage certificates in your vSphere environment. You can not only refresh default certificates that are issued by the VMware Certificate Authority (VMCA) but also add third-party or custom-made certificates to your environment.