vasa certs - can they just be removed?

Can someone shed some light on this as it seems overly complex (or at least the docs weave an incorrect thread). Just trying to make sense of whether the VASA certs are or aren't needed for anything...