$ vi deploy-vsphere.yml

...
-o use-certificate-duration.yml \\
...

vi vsphere-vars.yml

...
**certificate_duration: 5555
...**

vi use-certificate-duration.yml

...
- type: replace
  path: /variables/name=default_ca/options?/duration?
  **value: ((certificate_duration)**)
- type: replace
  path: /variables/name=mbus_bootstrap_ssl/options?/duration?
  **value: ((certificate_duration))**
- type: replace
  path: /variables/name=director_ssl/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=nats_ca/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=nats_server_tls/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=nats_clients_director_tls/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=nats_clients_health_monitor_tls/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=blobstore_ca/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=blobstore_server_tls/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=uaa_ssl/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=uaa_service_provider_ssl/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=credhub_ca/options?/duration?
  value: ((certificate_duration))
- type: replace
  path: /variables/name=credhub_tls/options?/duration?
  value: ((certificate_duration))