change the repo for certificates and fix checkout

When there isn't an identity file provided we should not use GIT_SSH
note - these repositories are the same, the old one was renamed