Remove old invalid certs - use system default