Hello,
Thank you for your question.
You must import the certificate to all computers that will communicate with the WSUS server. This includes all client computers, downstream servers, and computers that run the WSUS Administration Console. The certificate should be imported into the local computer Trusted Root CA store or into the Windows Server Update Service Trusted Root CA store.
Please have a look on below Microsoft article mentioning how to secure WSUS with SSL.
----------------------------------------------------------------------------------------------------------------------
--If the reply is helpful, please Upvote and Accept as answer--