cert used to be the default, so adjust the new
default to match using postlive (instead of the new prelive)