Pulp has changed where it stores certs. This may have an impact to Candlepin and the location of the CRL it creates when integrated with Pulp. The pulp-migrate script will handle upgrades. It will move cert files from the old location to /etc/pki/pulp/contentXXXX If you see any problems please let me know.