The docs in question I found that refer to the issue are here https://developer.hashicorp.com/vault/docs/auth/cert There's a note in there about unique serials