After NAPP undeployment, the stale entry for K8-MSG-Client certificate reoccurs in NSX Manager even after the deletion of the K8-MSG-Client certificates.
Any NSX with NAPP 4.2
Stale entry of K8-MSG-Client certificate in NSX Manager causes the automatic K8-MSG-Client certificate renewal and this gets stuck in between as the NAPP is not present in the environment.
Please contact broadcom support.