Originally Posted by deepzero

you could patch the certs in the kernel. If you`r lucky, the dbg files will give you an exact location.
Question is, ofc, whether this is worth the trouble...