Just an FYI to those that might use certificates when connecting to LDAP for authentication.
The upgrade cleans out the jre dir and with that the certificates are also cleaned out. Make sure you backup your cert files and then re-run the keytool to re-import the certs in to the keystore.
Thank you Michael for sharing your experiences and advice. We all learn from this!