change the repo for certificates and fix checkout