5.0.1 supports command line install of the commercial cert.
Code:
sudo zmcertmgr deploycrt comm <crt file> <ca chain file>
This will automatically deploy the cert to the jetty keystore. You may have to manually delete the existing tomcat entry if it's expired.
Code:
keytool -list -keystore /opt/zimbra/mailboxd/etc/keystore -storepass `zmlocalconfig -m nokey mailboxd_keystore_password`
keytool -delete -alias tomcat -keystore /opt/zimbra/mailboxd/etc/keystore -storepass `zmlocalconfig -m nokey mailboxd_keystore_password`