With bug 5468, certificates was moved to ctc/pki and while testing that bug i noticed there was no info about how to update.
*** This bug has been marked as a duplicate of bug 5620 ***