I have the exact same problem, I can not find how to remove old certs that have different host name/domain names