https://kb.vmware.com/s/article/2136693
After replacing VC VMCA certificate, VC VAMI page is still not using correct certificate due to missing CA chain. + read also the KB at the bottom in case you do backups as it has to include this new chain file as well.