diff --git a/clean-certs.sh b/clean-certs.sh
new file mode 100755
index 0000000000000000000000000000000000000000..d50575e6ab749ab0c0242a044fe155b5d834d58f
--- /dev/null
+++ b/clean-certs.sh
@@ -0,0 +1,2 @@
+#!/bin/bash -eux
+grep -wvFf <(ls /data/domains/) <(ls certs/*/*.csr | grep -vf <(echo -e "node-exporter\ncadvisor") | cut -d"/" -f2) | xargs -i% ls /system/haproxy/certs/%