VMware NSX 4.x
VMware NSX-T Data Center 3.x
During an initial attempt to remove the certificate, a problem within the block of code responsible for dealing with certificate deletions resulted in the certificate becoming stale.
Resolved in NSX 4.2 for future certificate deletions.
However, once a certificate gets into this stale state, upgrading to 4.2 won't fix or delete it. Please open a case with Broadcom Support for assistance with getting it removed.
See Creating and managing Broadcom support cases for details on opening a case.