Certificate for Vault HTTP UI is managed by Vault itself, and is short-lived (30 to 90 days).
Automation is welcome there.
This week-end, I've prepared P351 and P352 to kickstart that automation.