[POLICY] Simplify cert retrieval script