The internal Qlik Sense Self Signed Certificates are marked as vulnerability as per our company's security standards. We are required to replace these with CA signed certificates.
It seems the certificate attached to port 443 can be replaced with a CA Signed one, but not the ones used by Qlik services for internal communication in a multi-server cluster environment.
We need a way to replace the certificates used for internal communication as well.