To enable certificates button on Internet Explorer from GPO:
User Configuration—>Administrative template—>Windows Components—>Internet Explorer
Set “Disable changing certificate settings” to Disabled
Internet explorer certificates button greyed out Group Policy,