improve CertUtil