[user@db-prod ~]$ sudo su oracle
[oracle@db-prod /home/user]$ /u01/app/oracle/product/11.2.0/db_1/bin/emctl start dbconsole
Oracle Enterprise Manager 11g Database Control Release 11.2.0.4.0
Copyright (c) 1996, 2013 Oracle Corporation.  All rights reserved.
https://db-prod.example.com/em/console/aboutApplication
Starting Oracle Enterprise Manager 11g Database Control ........ started.
------------------------------------------------------------------
Logs are generated in directory /u01/app/oracle/product/11.2.0/db_1/db-prod.example.com_PROD/sysman/log

sudo su - oracle
emctl status dbconsole
locate config/http-web-site.xml
cp /tmp/ssl.jks /u01/app/oracle/product/11.2.0/db_1/oc4j/j2ee/OC4J_DBConsole_db-prod.example.com_PROD/config/
vi /u01/app/oracle/product/11.2.0/db_1/oc4j/j2ee/OC4J_DBConsole_db-prod.example.com_PROD/config/http-web-site.xml

 <?xml version = '1.0'?>
<web-site xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/web-site-10_0.xsd" port="1158" display-name="OC4J 10g (10.1.3) Default Web Site" schema-major-version="10" schema-minor-version="0" secure="TRUE">
        <default-web-app application="default" name="defaultWebApp"/>
        <web-app application="system" name="dms" root="/dmsoc4j" access-log="false"/>
        <web-app application="default" name="jmsrouter_web" load-on-startup="true" root="/jmsrouter"/>
        <web-app application="em" name="em" load-on-startup="true" root="/em" shared="true"/>
        <access-log path="../log/http-web-access.log" split="day"/>
        <ssl-config needs-client-auth="false" keystore="/u01/app/oracle/product/11.2.0/db_1/oc4j/j2ee/OC4J_DBConsole_db-prod.example.com_PROD/config/ssl.jks" keystore-password="password" cipher-suites="SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA" />
</web-site> 

emctl stop dbconsole
emctl start dbconsole