getting rid of old certs