The conformance suite should include a testcase for this, since the client specification forbids it. See: https://github.com/sigstore/sigstore-go/issues/225