Update vCenter-SSL.ps1

inc/vCenter-SSL.ps1

@@ -130,6 +130,7 @@ if ($paCert) {
         $needNewCert = $true
     } else {
         Write-Log INFO "Skipping issuance — certificate valid >$RenewalWindow days."
+        $needNewCert = $false
     }
 } else {
     Write-Log WARN "No existing cert found — issuance required."
@@ -200,6 +201,7 @@ foreach ($f in @($certPath,$keyPath,$chainPath)) {
     }
 }
 
+if ($needNewCert) {
         # ----------------------------
         # Add CA chain to trusted store (remove duplicates)
         # ----------------------------
@@ -288,6 +290,7 @@ if ($needPush) {
         } else {
             Write-Log INFO "No certificate update needed. Skipping vpxd restart + Veeam rescan."
         }
+}
 
 # ----------------------------
 # Script Complete