Hi,

is a ESXi host part of a cluster then vCenter is responsible for the generation of the host certificates.

michael@debdev ~ # openssl s_client -host myESXiHost.myDomain.org -port 443 | openssl x509 -text
...Issuer: CN=myVCenter, DC=vsphere, DC=local, C=US, ST=California, O=myVCenter, OU=VMware Engineering
...
Subject: C=US, ST=California, L=Palo Alto, O=VMware, OU=VMware Engineering, CN=myESXiHost.myDomain.org/emailAddress=vmca@vmware.com
...

If you want to change these parameters to your own set go to the vCenter advancedconfig page and adjust the

vpxd.certmgmt

properties.

Michael