cert normalization