Do you use the vCD appliance? If so, from the top of my head the eth0 (public IP) interface should be used for external communcations including the console functionality.
If followed Anthony's guide for installing a Let's Encrypt cert for vCD. it works like a charm.
https://anthonyspiteri.net/adding-lets-encrypt-ssl-certificate-to-vcloud-director-keystore/
By the way did you perform a vCD cell "configuration" after changing the SSL certs?
# Run the vCD Configuration again to import the new KeyStore /opt/vmware/vcloud-director/bin/configure
