vcenter DNS alias and VMCA SSL certificate

Hi,

We are running vCSA 6.5. Our vcenter has an official hostname but we normally access it using a DNS alias/CNAME. I would like to regenerate the SSL/TLS certificate of the vCSA to include those "subject alternative names".

- Is it possible to configure "subject alternative names" for the vCSA with the vSphere Certificate Manager Utility (/usr/lib/vmware-vmca/bin/certificate-manager) ??

- My only option would be to use VMCA Default Certificates with External SSL Certificates (Hybrid Mode) ??

Thanks in advance! this is my first approach the VMCA.