Tried it and no duplicated certificates.
Nonetheless, I had a remote session with vmware. According to the support a subnet change of a vcsa is not recommended and probably won't work. Checked the info:
If you have two-sites, as in our case, the recommend to set up a second vcsa and run both vcsa instances in a linked mode. However, anser and problem isn't directly the main question of the thread but has the same error log