Since in the partner configuration the old server certificate is explicitly specified as the user certificate, the new user certificate for the HBS is not trustworthy. You must cancel the old user certificate from the partner configuration in the HBS portal and upload the new one in the correct environment. Once the new certificate is confirmed by Hubject, the connection is possible again.