Vulnerability has been found for demo certificate. Based on that this certificate should be removed.
The demo certificate cannot be removed. It is created for demonstration purposes only and intended to be replaced in a secure production environment by a third party signed certificate, when SMG serves traffic using https protocol by default demo cert is required.