Brian Paskin can help. He has all the steps noted down.
very easy to change default certs in tWAS, just a few key stores. But in Liberty, collectives into a number of keystores (there is some doc on that) and the act of changing the default certificates is not trivial.
Brian says he can create doc on that as he has all the steps noted down.