remove unneeded cert exclusions