I made many tests, this error occurs only when VMCA functions as an intermediate to enterprise CA.
If VMCA work as self signed (external or embedded) evrything work ok, it does not matter whether the machine (vCenter with external PSC or embedded) is certified with the VMCA or enterprise CA.
Regards,
Piotr