The issuing certificate authority is basically the same as the intermediate but instead of signing it with the root it is signed by the intermediate.

You also may notice that the common name will have the FQDN of my vCenter appliance. That is because I have plans for this certificate in a later blogpost.

Again hit Save and we are done.