[COMMON][CERTS] Use sh to onboard custom certs