could someone help to explain is there anyway we can change the cert of fleet?

Do you mean the web (HTTPS) certificate ?

If Fleet is terminating TLS, you just need to replace the certificate, update the configuration if the path/file name changes and restart Fleet. Depending on who issued the certificate and how osquery was deployed, you may also need to provide an updated certificate chain to your agents.