The Certification Paradox: Certifications Admit Better Attacks