Use the default cert file when updating

Previously the tool would read from ARGF, but I forgot to enter it or
look at the program for hours.  Now I won't feel silly when I try to
figure out why it isn't working.