Cant set advertised cert authorities

You should be able to set that from the CLI even though the cert mode is ignore. The only downside is to be careful not to use the GUI to view that profile as it will reset it. We do have a CR addressing a very similary problem on a different post (you couldn't specify the CRL file if the cert mode was set to ignore). You could always call support and request a hotfix (this will potentially raise the priority on getting it fixed sooner rather than later).