make sure all certificates visible are ones where people are active