Hi Maxim,

Thanks for replying to the post. Below is my concern.

Multiple certificate can have the same DN and the DN name match will happen after the SSL handshake is complete using the root CA. It means the SSL layer is complete and we are doing authorization not authentication.