updating update script for certs, removing discern