Strictly speaking only one ecert can be used on PNR that is limited to a single person

What you are seeing is inconsistency in how UA agents provide exceptions. So the policy is no but they realized that is a bit harsh -- just inconsistency on what they will do as exceptions.

Additionally it is more effort to apply two mis-match ecerts to a two person PNR.