I didn't like this complication, better bail out on multiple CA's with same subject