deinitialize extra certs if they are empty.