A management certificate cannot be signed twice. If it is necessary to sign a certificate again, it must first be revoked.
openssl ca -revoke cert.pem