Got new certificate from CA by providing just the APM hostname and needed to create a new keystore file since the original keystore file have a different private key.
APM 10.8
Here's the procedure to create a new keystore file
1) keytool.exe -importkeystore -srckeystore filenamepfx -srcstoretype PKCS12 -destkeystore jks-for-you.jks -deststoretype pkcs12
You will be ask for the password
Enter destination keystore password:password
Re-enter new password:password
Enter source keystore password:XXXXX
The source keystore password is the one from the password.txt
2) This will create a file called jks-for-you.jks
Rename jks-for-you.jks to keystore
3) Use this new keystore file in your APM