update_cert_records() uses global_dbsession