vCenter Server 8.0 U3g and later
By default the alarm "MACHINE_SSL_CERT certificate in VECS has expired. KB 385107" does not automatically reset to Green once the expired or expiring certificate has been replaced.
Select the alarm under 'Monitor > Issues and Alarms > Triggered Alarms' and then "Reset to Green".