I had to reopen https://pagure.io/dogtagpki/issue/2618 Allow CA to process pre-signed CMC renewal non-signing cert requests due to an issue in UniqueKeyConstraint.java where subjectDN comparison was not 100% correct. This patch makes sure that the comparison is done at Object level so eliminates room for error. thanks, Christina