When we configure mTLS in a HTTPS LB, we can only use one CA so that loimit the possibility os using this feature (the most of our domain needs more that a Root CA because the end customer can use more than one certificate).