In this guide, I will walk you through installing a self-signed SSL certificate, by generating a Certificate Signing Request for vCenter and issuing the certificate from Microsoft Certificate Authority.
vCenter 7 and above
Microsoft Certificate Authority (installed & configured)
Root certificate from the Microsoft CA installed on your workstation
Go to the vSphere Client > Administration > Certificate Management > Generate Certificate Signing Request (CSR)
Common Name & Host should be prefilled when entering the CSR info. However, you should fill the Organization name, Organizational Unit (Department Name), Country, State, Locality (City), and Email Address as shown below: