Hi Vikil,
Can you tell me if both active and standby ACE are still in sync? Check the "sh ft group detail" command for this.
Can you confirm whether the new certificate is present on both ACE? See "sh crypto files" for this.
Finally, can you show me the config of the ssl-proxy that you would like to modify?
Thanks,
Olivier