The link below may helpful to your issue.
Listener Certificate Configurations in Windows Server 2012 / 2012 R2
Replace RDP Default Self Sign Certificate
Securing RDP Connections with Trusted SSL/TLS Certificates
Hope this helps and please help to accept as Answer if the response is useful.