i upgraded my proxmox 3.x to 4.4 kernel is: pve-kernel-4.4.95-1-pve
After upgrade i removed certificates and run "pvecm updatecerts -f" and only generated pve-root-ca.pem.
Because of that i got this error: "kvm: -vnc unix:/var/run/qemu-server/NODENAME.vnc,x509,password: Failed to start VNC server: Our own certificate /etc/pve/local/pve-ssl.pem failed validation against /etc/pve/pve-root-ca.pem: The certificate hasn't got a known issuer"
After all these things I wrote my own method.
If there is a question, it is from me, but I wrote that someone like me would find the solution if they encountered this situation.