Yeah, that's one of the complications. It would have to be ignored in processing, or multiple variants be presented at once (preferred).

Certificates are not the same as the public key; multiple certs sharing the same key is essentially the way around this. It's not as elegant as identical signing of the same cert, but it could work.