[Backport 2.x] Fetch certs from security repo and remove locally checked in demo certs#718