Moving applet from Oracle jre: first tries

[helpcrypto helpcrypto]

Maybe another bug, so post here before filling.

If I use a pkcs11 provider Keystore to do:
    ks.getCertificateAlias()
    ks.deleteEntry(alias)
    ks.store(null)
the public key is not destroyed from the smartcard, only the cert.

How/Which methods should I invoke to delete cert+public key+private
key from the device?

Thanks!