active directory, domain controller, certificate services

we are getting this vulnerability report

This is on port 389, RDP 

Right now we have self signed cert sitting

so when i go to mmc -under remote desktop- certificates - i can import the RDP cert from CA but i see the self signed certificate there, when i try to delete it and reboot my DC self signed certificate shows back in rdp folder in mmc

is there any way the self certificate doesnt show up at all after reboot

i tried to go to gpedit.msc-emote desktop services - remote desktop session host - security-server authentication template and enabled it  by putting RDP template name but still the self signed cert shows up 

and i cannot remediate the vulnerability