ls_update_certs.py