Symptom:
VMware vCenter Server 7.x
VMware vCenter Server 8.x
By default, when a host is reconnected to vCenter Server and its SSL certificate will expire within 240 days, the vCenter Server generates a new certificate and pushes it to the host.
Host reconnection can occur not only when a user performs [Connect] > [Disconnect] followed by [Connect] > [Connect] in the vSphere Client, but also, for example, when the host is restarted.