See below the release notes for the Certificate Manager 4.3.1 independent release.

Certificate Manager 4.3.1 is not distributed out-of-the-box with PKI Hub 1.3. Instead, this version must be downloaded and installed as explained in Upgrading Certificate Manager.