VMware NSX
The preferred method for replacing an expiring or expired self-signed local manager certificate in NSX versions earlier than 4.2 is to use the CARR script. This is documented in Using Certificate Analyzer, Results and Recovery (CARR) Script to fix certificate related issues in NSX.