refine CertUtil