1008016: update repos on certlib change

I'm not sure how to reliably test this in a way that won't break if we change anything.