Enabled WebLogic Server domain administration port, now can't connect

Question

I am having troubles in an OID 11g cluster using new custom identity and Java standard trust, so setup a basic lab server with WLS 10.3.3 admin server and one managed server. All was well.
I enabled the domain-wide admin port (9002) and can access the admin server console via https://localhost:9002/em.
I am unable to start the managed server with ADMIN_URL of t3s://localhost:9002 or https://localhost:9002 or using the fully-qualified host name. It says "There is no server running at t3s://localhost:9002" for example.
I enabled SSL debugging, and it just "gives up" quietly, deciding there is no SSL trust:
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <HANDSHAKEMESSAGE: Certificate>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <Validating certificate 0 in the chain: Serial number: -
33322804764672255361779797406005394240
Issuer:C=US, ST=MyState, L=MyTown, O=MyOrganization, OU=FOR TESTING ONLY, CN=CertGenCAB
Subject:C=US, ST=MyState, L=MyTown, O=MyOrganization, OU=FOR TESTING ONLY, CN=myhostname.acme.com
Not Valid Before:Sun Mar 27 17:37:38 EDT 2011
Not Valid After:Sat Mar 28 17:37:38 EDT 2026
Signature Algorithm:MD5withRSA
>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <Validating certificate 1 in the chain: Serial number:
46914133237969612308202465797198785159
Issuer:C=US, ST=MyState, L=MyTown, O=MyOrganization, OU=FOR TESTING ONLY, CN=CertGenCAB
Subject:C=US, ST=MyState, L=MyTown, O=MyOrganization, OU=FOR TESTING ONLY, CN=CertGenCAB
Not Valid Before:Thu Oct 24 11:54:45 EDT 2002
Not Valid After:Tue Oct 25 11:54:45 EDT 2022
Signature Algorithm:MD5withRSA
>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <validationCallback: validateErr = 0>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> < cert[0] = Serial number: -
33322804764672255361779797406005394240
Issuer:C=US, ST=MyState, L=MyTown, O=MyOrganization, OU=FOR TESTING ONLY, CN=CertGenCAB
Subject:C=US, ST=MyState, L=MyTown, O=MyOrganization, OU=FOR TESTING ONLY, CN=myhostname.acme.com
Not Valid Before:Sun Mar 27 17:37:38 EDT 2011
Not Valid After:Sat Mar 28 17:37:38 EDT 2026
Signature Algorithm:MD5withRSA
>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> < cert[1] = Serial number:
46914133237969612308202465797198785159
Issuer:C=US, ST=MyState, L=MyTown, O=MyOrganization, OU=FOR TESTING ONLY, CN=CertGenCAB
Subject:C=US, ST=MyState, L=MyTown, O=MyOrganization, OU=FOR TESTING ONLY, CN=CertGenCAB
Not Valid Before:Thu Oct 24 11:54:45 EDT 2002
Not Valid After:Tue Oct 25 11:54:45 EDT 2022
Signature Algorithm:MD5withRSA
>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <SSLTrustValidator returns: 0>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <Trust status (0): NONE>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <Performing hostname validation checks: localhost>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <isMuxerActivated: false>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <873462440 SSL3/TLS MAC>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <873462440 received HANDSHAKE>
<Mar 30, 2011 7:38:51 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <HANDSHAKEMESSAGE: ServerHelloDone>
I set flags like this: -Dweblogic.security.TrustKeyStore=DemoTrust -Dweblogic.security.SSL.ignoreHostnameVerification=true , no success.
Any assistance you could provide would be much appreciated! Thank you.

Answer 1

More info: I'm using the default DemoTrust setup.
Correction: I can connect to the console at https://localhost:9002/console (not /em).