When you select a new cert in management this is suppose to sync in the configuration to both devices. You should be able to manually force the config synce after selecting the new cert in mgmt if the auto sync is not working.
the web cipher is also affected by the choice in the mgmt screen when selecting the certificate. This does default to md5 but can only raise to 3DES-SHA1. Under Admin > management.