I replied to someone a while back with similar ask. The post talks about wildcard certs but if you are applying CA certs the process is essentially the same.
https://communities.vmware.com/t5/VMware-vCloud-Director/Wildcard-SSL-cert-VMware-cloud-diretcor/td-...
