--- # defaults file for certificates