A certificate with a generator is :auto

Unless it has responses newer than when the generator completed
then it defaults back to :self like a user submitted certificate