Q: SCEP Provisioning & 802.1x WiFi Configuration via .mobileconfig

I'm having a problem setting up wireless profiles that will utilize a certificate obtained via SCEP that is in the same profile.

I am trying to provision two wireless 802.1x profiles each of which has it's own dictionary entry in the array and within that entry the key PayloadCertificateUUID contained the UUID for the SCEP request. This configuration works fine if I am provisioning 1 WiFi network with the associated SCEP request. Once I add the second WiFi entry and try to add the profile I receive an error -319 unable to connect to the wifi network when attempting to add the profile.

Is there a limitation of the SCEP profile wherein it can only be used in one WiFi profile?

Is there a way to get a more verbose message from the profiles CLI tool other than -v? -319 errors seem to be pretty generic. I'm assuming it is erroring on the second profile.

Has anyone successfully utilized one SCEP request to provision 2 EAP-TLS WiFi networks? If so, would you be willing to share the config or detail the keys used?

Thank you.