add certificates to ignore