By default, a certificate revocation check is mandatory and Self-Signed Certificates don’t support Revocation checks. To work around it, modify the following registry key on Primary, Replica Servers

reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization\Replication" /v DisableCertRevocationCheck /d 1 /t REG_DWORD /f

Hyper-V Replica using Certificates from an Enterprise CA – can be used for Member Servers

https://blogs.technet.microsoft.com/virtualization/2012/07/10/requesting-hyper-v-replica-certificates-from-an-enterprise-ca/