Error 'certificate is already installed' when trying to replace an expired certificate that has been renewed
NSX-T 4.x
If NSX-T detects the same (named) certificate when using a renewed certificate, it will not allow you to replace the expired certificate.
Import the certificate into the NSX manager and then apply it to the API. After that you can remove the expired the certificate from the system.