allow for multiple certs to have the same subject.  This probably needs to be worked out better
when we implement pkcs11... then we will do something with options