I can't really see the point of having a policy extension (in an EE cert) if you can have more than one, and they conflict.