Renewing SSL cert on Junos Pulse MAG2600

The following has been done already:
- generated CSR from MAG
- plugged CSR into GoDaddy for renewal
- downloaded renewed cert in crt format (two crt's, one of them being the gd_bundle

The cert installs without complaint, showing as site.domain.com, Go Daddy Secure Certificate Authority - G2 Aug 22 20:35:38 2016 GMT to Aug 22 18:53:41 2017 GMT .

However, I see no way to delete or replace the expired cert.  I wouldn't care about that if the system recognized the new cert, but it doesn't.  The current certs are tied to ports - expired CA cert tied to external port, and self-signed cert tied to internal.  I see no way to alter that port assignment property anywhere in the whole console. 

Thanks for any guidance...