After regenerating certificates in VMware Cloud Director Availability appliances the old certificate is backed up and located in: /opt/vmware/h4/serviceType/config/keystore.p12.bak, where serviceType is cloud, manager, replicator, or tunnel.
If an issue is encountered during a certificate change you can revert back to the original certificate.
VMware Cloud Director Availability 4.x
To revert to the previous certificate please perform the following steps:
# cd /opt/vmware/h4/serviceType/config/ where serviceType is cloud, manager, replicator, or tunnel
keystore.p12 to keystore.p12.backup
# mv keystore.p12 keystore.p12.backup
mv keystore.p12.bak keystore.12