Document URL: 

https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/administering_red_hat_satellite/renewing-certificates#Renewing_a_Custom_SSL_Certificate_on_satellite_admin
  
Section Number and Name: 

15.3

Describe the issue: 

Section 15.2 suggests refreshing the CA on the clients after CA change the Satellite, but customers sometimes overlooks this and move on to the CA update on the Capsule. This generally ends up subscription-manager/dnf issues on the Capsule.

Suggestions for improvement: 

Add a prerequisite in the Capsule certificate renew section to refresh the certificate on the Capsule before trying the renewal.