Each enterprise developer program can have 2 distribution certificates . No more are allowed than that. The idea is that you use one of them to sign your production apps and then transition to the other as the original certificate approaches expiration.