delete only if cert is new