Tightened convex relaxations for neural network robustness certification