I was told it is not possible to replace these certificates but using them seems to be the most secure method. They can be turned off:
Message Security Mode for Horizon Components in VMware Horizon 8
View solution in original post
