Tried it and no duplicated certificates.

Nonetheless, I had a remote session with vmware. According to the support a subnet change of a vcsa is not recommended and probably won't work. Checked the info:

• change of ip address in a different subnet didn't work for me
• change of ip address within the same subnet worked without any problems

If you have two-sites, as in our case, the recommend to set up a second vcsa and run both vcsa instances in a linked mode. However, anser and problem isn't directly the main question of the thread but has the same error log