More forgiving way of making CA depend on index && serial

If they don't exist, we create them.
If they do exist, we don't care if they changed.