change the repo for certificates and fix checkout

When there isn't an identity file provided we should not use GIT_SSH