Actually, it is probably better to just introduce 'deleted' flag instead of the extra list, also getting rid of counterintutive pre-existing checks for list_empty() on cert's list entry to detect that cert is deleted from the store. I will change that.