Hi,
I tested similar scenario and it seems there's a easy work-around. Can you try to Delete the VC from the UM UI. Then Activate it again from the same UI. When the VC is activated the UM will try to connect to it and download the new certificate. Then you'll have to accept them and everything should be fine. Please, tell us if this works, because I didn't test the exactly same scenario, because it is hard to reproduce locally?
