Patch Manager obtains that cert as part of the server attribute collection, which is achieved by executing a Refresh Update Server action from the WSUS node under Update Services.
In the instant case, the self-signed cert is cached on the PM server; refresh the server node and it will obtain the current cert.