Merge "[COMMON][CERTS] Use sh to onboard custom certs" into guilin