restart glassfish using initctl, not start-domain
dont delete old certs from cacerts when creating new certs