move production site up first so that people without SNI get the right cert for production