The behavior of the UI needs to be modified to support self-signed CA. Unlike dogtag, the self-signed CA doesn't store the certificates it issued, so some of the cert-* commands will not work. The service/host details pages are relying on these commands to check the certificate status and revoke/restore the certificate. However, other operations (i.e. create, get, and view certificate) should still work.