I have this working now.
Using SJSAS 9.1 there was no problem, it worked without the need to mess with certificates.
Using SJSAS 8.1 the trick was to add the certificate using an old mechanism that dates back to Netscape's halcyon days.
cd /opt/SUNWappserver/domains/domain1/config
/opt/SUNWappserver/lib/certutil -d . -A -n testCert -t C,C,C -i /whatever/locationOfCertificate/directory2.xxxxx.com.x509.crt
[Message sent by forum member 'vincewebb' (vincewebb)]
http://forums.java.net/jive/thread.jspa?messageID=321074