Hi Wasfi,
If you are asking about the WebConsole certificate of a Content Analysis box, this is already added in CAOS 2.1.1.1. Below from release notes
In order to take advantage of the new SHA-256 certificate included in CA 2.1.1.1, you must regenerate the certificate after upgrading. If you do not regenerate, Content Analysis will still use the SHA-1 certificate.
To generate a SHA-256 certificate:
1. Upgrade to CA 2.1.1.1.
2. In the Content Analysis web management console, select Settings > Web Management.
3. Click Certificate Management.
4. Click Create Certificate and modify information as necessary.
5. Click Save Changes.
When the changes are saved, Content Analysis will use the new SHA-256 certificate.