Title: Replacing the Red Hat Enterprise Virtualization Manager SSL Certificate

Describe the issue:
It is unclear what constraints the resulting CA needs to work for rhevm

Suggestions for improvement:
A walk through of generating and signing the CA for rhev with the required CA options and constraints would be handy (using openssl).
A description of how rhev uses this CA and the resulting certificates would also assist in troubleshooting

Additional information:
having a broken cert in place prevents engine-log-collector from collecting the information to get appropriate support from GSS