Following an out of band change to the certificates on components such as vCenter, NSX, SDDC manager etc. , only TLS certificates get updated as per the change on Fleet management as below after waiting for a few hours:
VMware Cloud Foundation 9.x
This happens as Fleet manager currently syncs the TLS certificate changes only as made on the end component via Certificate collection which runs every 6 hours.
This is an expected behavior as per the current design in case out-of-band changes are performed.
Please perform all certificate related operations from Fleet management UI.