It works for me setting both ISSUER and SUBJECT. I'm editing Windows register. I'm using the following value:

{"pattern": "*", "filter": { "ISSUER": { "CN": "SOME_CN" }, "SUBJECT": { "CN": "SOME_CN" } }}.

Make sure you are using the exact CN by checking the certificate details in Windows certificate manager, if you are using Windows.