Ensure to do the following before importing custom identity certificates on the Experience Portal servers:

• Remove the EP Signing Certificate

• Upload the external CA Certificates as Platform type Trusted Certificate