We already opened a ticket, over 10 hours ago as a sev 1 because we could not access the vsphere web client or the vsphere windows client and our vcd environment could not access it either. The support team knocked it down to a sev 2 because it is vsphere 6 which they said is no longer supported and I have not heard back since. So much for paying for support.
I have already looked over the article you provided and a few others like it. It talks about re generating root certs for the vsphere server. Having vcd and nsx attached to this vsphere, we are not sure what generating new root certs will do with those connections. Since vmware support won't even answer us, i am not willing to take that chance of our environment going down and being ignored by support.
Surely there has to be a way to do something with just those 4 certs in the picture I provided in this thread without breaking all the connections to everything else.