WebSphere 6.1 SSL certificate expirations

I had a Deployment Manager with two remote nodes federated into it and had left them switched off for over a year now. When I restarted the Deployment Manager the new certificate expiration handling process had renewed the certificates within the /config/cells/CELL_NAME/trust.p12 and /config/cells/CELL_NAME/key.p12 files. Unfortunately the certificates on the nodeagents had expired by then and were failing to sync with the Deployment Manager. So step 1 was to copy the trust.p12 and key.p12 files to the nodes under the same path. This stopped the synchronization issue. However there are two more key.p12 and trust.p12 files sitting under PROFILE_ROOT/etc directory which were out of sync as well. When I manually issued a sync request, received a message like the following

ADMU0116I: Tool information is being logged in file
           /opt/IBM/WebSphere/AppServer/profiles/AppSrv01/logs/syncNode.log
ADMU0128I: Starting tool with the AppSrv01 profile

*** SSL SIGNER EXCHANGE PROMPT ***
SSL signer from target host null is not found in trust store /opt/IBM/WebSphere/AppServer/profiles/AppSrv01/etc/trust.p12.

Here is the signer information (verify the digest value matches what is displayed at the server):

Subject DN:    SUBJECT_DN
Issuer DN:     ISSUER_DN
Serial number: SERIAL_NUMBER
Expires:       Sat Oct 16 14:26:05 BST 2010
SHA-1 Digest:  SHA1-DIGEST
MD5 Digest:    MD5-DIGEST

Add signer to the trust store now? (y/n)

Please Note: I have replaced the actual values with some placeholders for obvious security reasons. When I entered yes to this message, it started working fine. In order to keep  these in real sync the easiest option would be create a soft link from PROFILE_ROOT/etc directory to the key.p12 and trust.p12 files within the config/cells/CELL_NAME directory on the deployment manager and the remote nodes. I have to look into these a bit carefully as the certificates in the PROFILE_ROOT/etc directory are used mainly for issuing commands to the running nodeagents and servers whereas the certs within the PROFILE_ROOT/config/cells/CELL_NAME directory are used for synchronization with the DM. Maybe I’m just confused.