P6/CM Activation of Third Party Certficate

We are using the typical P6/CM environment with a P6 app server running on Windows with Jboss and internet access.

We created a self certifcate using the KEYTOOL in the KEYSTORE, turned on HTTPS via the SERVER.XML and other required mods on port 443, and everything works fine.  We get the typical complaints about the uncertifed certifcate, but everything works fine in all regards.

We sent the CSR to Thawte and received the replacement signed CERs and loaded them into the new KETSTORE, but I can not get to the P6 server via the internet.  When I switch back to the previous KEYSTORE everything works fine again.