Comment by LtWorf

Certainly you're aware that every certificate sits in a separate file and an update can just remove the interested files?