Use POSITIVE_CERTIFICATION instead of DEFAULT_CERTIFICATION (the B32 is known to be valid)