diff --git a/doh-scripts/cloudflare.rsc b/doh-scripts/cloudflare.rsc
index a6d85d8..8d1f479 100644
--- a/doh-scripts/cloudflare.rsc
+++ b/doh-scripts/cloudflare.rsc
@@ -5,7 +5,7 @@
 /ip dns set verify-doh-cert=no
 
 /tool fetch url=https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem
-/certificate remove [find]
+/certificate remove [find name~"DigiCertGlobalRootCA.crt.pem"]
 /certificate import file-name=DigiCertGlobalRootCA.crt.pem passphrase=""
 /file remove DigiCertGlobalRootCA.crt.pem
 
diff --git a/doh-scripts/google.rsc b/doh-scripts/google.rsc
index 6003920..3159737 100644
--- a/doh-scripts/google.rsc
+++ b/doh-scripts/google.rsc
@@ -6,7 +6,7 @@
 
 /tool fetch url=https://pki.goog/repo/certs/gtsr1.pem once
 :delay 5s
-/certificate remove [find~gtsr1]
+/certificate remove [find name~"gtsr1.pem"]
 /certificate import file-name=gtsr1.pem passphrase=""
 /file remove gtsr1.pem
 
diff --git a/doh-scripts/nextdns.rsc b/doh-scripts/nextdns.rsc
index 7e28d15..499bc5d 100644
--- a/doh-scripts/nextdns.rsc
+++ b/doh-scripts/nextdns.rsc
@@ -13,12 +13,12 @@
 /ip dns set verify-doh-cert=no
 
 # Quad9 uses DigiCert like CloudFlare.
-:local result [ /tool fetch url=http://crt.usertrust.com/USERTrustECCAddTrustCA.crt dst-path=ssl.pem as-value ];
+:local result [ /tool fetch url=http://crt.usertrust.com/USERTrustECCAddTrustCA.crt dst-path=nextdns.pem as-value ];
 :do { :delay 2s } while=( $result->"status" != "finished" )
 
-/certificate remove [find]
-/certificate import file-name=ssl.pem passphrase=""
-/file remove ssl.pem
+/certificate remove [find name~"nextdns.pem"]
+/certificate import file-name=nextdns.pem passphrase=""
+/file remove nextdns.pem
 
 /ip dns
     static remove [find name="dns.quad9.net"]
diff --git a/doh-scripts/quad9.rsc b/doh-scripts/quad9.rsc
index 9a5c5a1..385e0e5 100644
--- a/doh-scripts/quad9.rsc
+++ b/doh-scripts/quad9.rsc
@@ -6,12 +6,12 @@
 /ip dns set verify-doh-cert=no
 
 # Quad9 uses DigiCert like CloudFlare.
-:local result [ /tool fetch url=https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem dst-path=ssl.pem as-value ];
+:local result [ /tool fetch url=https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem dst-path=quad9.pem as-value ];
 :do { :delay 2s } while=( $result->"status" != "finished" )
 
-/certificate remove [find]
-/certificate import file-name=ssl.pem passphrase=""
-/file remove ssl.pem
+/certificate remove [find name~"quad9.pem"]
+/certificate import file-name=quad9.pem passphrase=""
+/file remove quad9.pem
 
 /ip dns
     static remove [find name="dns.quad9.net"]