CERTNAME can/will appear twice