Oleg,

They are the same. tls_self_signed_cert is the original that gets stored in the root CA, and can later be retrieved with issuing_ca attribute.

If you look in your state file, you can verify that they are indeed the same.