refine common certs