diff --git a/src/chrome/content/rules/38.de.xml b/src/chrome/content/rules/38.de.xml
index 7fb95349b831..85114f81b434 100644
--- a/src/chrome/content/rules/38.de.xml
+++ b/src/chrome/content/rules/38.de.xml
@@ -8,7 +8,7 @@
 	STS header includes includeSubdomains
 
 -->
-<ruleset name="38.de" default_off="missing certificate chain">
+<ruleset name="38.de" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/AK-Vorrat.de.xml b/src/chrome/content/rules/AK-Vorrat.de.xml
index 87e6a3d93407..325f0ef16767 100644
--- a/src/chrome/content/rules/AK-Vorrat.de.xml
+++ b/src/chrome/content/rules/AK-Vorrat.de.xml
@@ -15,7 +15,7 @@
 		tuebingen.vorratsdatenspeicherung.de
 
 -->
-<ruleset name="Vorratsdatenspeicherung.de" default_off="missing certificate chain">
+<ruleset name="Vorratsdatenspeicherung.de" default_off="cert-chain">
 
 	<target host="vorratsdatenspeicherung.de" />
 	<target host="www.vorratsdatenspeicherung.de" />
diff --git a/src/chrome/content/rules/ALT_Linux.org-problematic.xml b/src/chrome/content/rules/ALT_Linux.org-problematic.xml
index 3a55b9ee54d6..3d1d070c9f4d 100644
--- a/src/chrome/content/rules/ALT_Linux.org-problematic.xml
+++ b/src/chrome/content/rules/ALT_Linux.org-problematic.xml
@@ -5,7 +5,7 @@
 	Server sends includeSubdomains in HSTS header.
 
 -->
-<ruleset name="ALT Linux.org (untrusted root)" default_off="untrusted root">
+<ruleset name="ALT Linux.org (untrusted root)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Auto.ro.xml b/src/chrome/content/rules/Auto.ro.xml
index 44f98c095f11..b6bbaf86f01c 100644
--- a/src/chrome/content/rules/Auto.ro.xml
+++ b/src/chrome/content/rules/Auto.ro.xml
@@ -57,7 +57,7 @@
 	³ Not secured by us <= mismatched
 
 -->
-<ruleset name="Auto.ro (partial)" default_off="missing certificate chain">
+<ruleset name="Auto.ro (partial)" default_off="cert-chain">
 
 	<target host="auto.ro" />
 	<target host="www.auto.ro" />
diff --git a/src/chrome/content/rules/Automx.org.xml b/src/chrome/content/rules/Automx.org.xml
index 8baa0c07f01b..e6dbafd7c00c 100644
--- a/src/chrome/content/rules/Automx.org.xml
+++ b/src/chrome/content/rules/Automx.org.xml
@@ -17,7 +17,7 @@
 		- mail.automx.org
 
 -->
-<ruleset name="automx.org (partial)" default_off="missing certificate chain">
+<ruleset name="automx.org (partial)" default_off="cert-chain">
 
 	<target host="automx.org" />
 	<target host="www.automx.org" />
diff --git a/src/chrome/content/rules/Avantar.com.xml b/src/chrome/content/rules/Avantar.com.xml
index 4a8d990576b3..85cfdb2ff2ae 100644
--- a/src/chrome/content/rules/Avantar.com.xml
+++ b/src/chrome/content/rules/Avantar.com.xml
@@ -2,7 +2,7 @@
 	NB: Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Avantar.com" default_off="missing certificate chain">
+<ruleset name="Avantar.com" default_off="cert-chain">
 
 	<target host="avantar.com" />
 	<target host="www.avantar.com" />
diff --git a/src/chrome/content/rules/BTC100.com.xml b/src/chrome/content/rules/BTC100.com.xml
index b2376df499dd..505742cae28c 100644
--- a/src/chrome/content/rules/BTC100.com.xml
+++ b/src/chrome/content/rules/BTC100.com.xml
@@ -2,7 +2,7 @@
 	NB: Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="BTC100.com" default_off="missing certificate chain">
+<ruleset name="BTC100.com" default_off="cert-chain">
 
 	<target host="btc100.com" />
 	<target host="www.btc100.com" />
diff --git a/src/chrome/content/rules/Be_Mobile.ua.xml b/src/chrome/content/rules/Be_Mobile.ua.xml
index 550726c2f1be..31873a0c1cc8 100644
--- a/src/chrome/content/rules/Be_Mobile.ua.xml
+++ b/src/chrome/content/rules/Be_Mobile.ua.xml
@@ -18,7 +18,7 @@
 	² Unsecurable <= refused
 
 -->
-<ruleset name="Be Mobile.ua" default_off="missing certificate chain">
+<ruleset name="Be Mobile.ua" default_off="cert-chain">
 
 	<target host="bemobile.ua" />
 	<target host="juke.mmi.bemobile.ua" />
diff --git a/src/chrome/content/rules/Beck_PC.ch.xml b/src/chrome/content/rules/Beck_PC.ch.xml
index e3e9217f5cdd..75780e1d8fd1 100644
--- a/src/chrome/content/rules/Beck_PC.ch.xml
+++ b/src/chrome/content/rules/Beck_PC.ch.xml
@@ -12,7 +12,7 @@
 		- .pcp.ch
 
 -->
-<ruleset name="Beck PC.ch" default_off="missing certificate chain">
+<ruleset name="Beck PC.ch" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Cable6.net.xml b/src/chrome/content/rules/Cable6.net.xml
index c43a2432f441..0b4ff59bb89d 100644
--- a/src/chrome/content/rules/Cable6.net.xml
+++ b/src/chrome/content/rules/Cable6.net.xml
@@ -12,7 +12,7 @@
 		- Bug from piwik.cable6.net
 
 -->
-<ruleset name="cable6.net" default_off="missing certificate chain">
+<ruleset name="cable6.net" default_off="cert-chain">
 
 	<target host="cable6.net" />
 	<target host="piwik.cable6.net" />
diff --git a/src/chrome/content/rules/CoGen-Media.xml b/src/chrome/content/rules/CoGen-Media.xml
index a493e72be64b..7089db721077 100644
--- a/src/chrome/content/rules/CoGen-Media.xml
+++ b/src/chrome/content/rules/CoGen-Media.xml
@@ -38,7 +38,7 @@
 	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/
 
 -->
-<ruleset name="Cogen Media (partial)" default_off="missing certificate chain">
+<ruleset name="Cogen Media (partial)" default_off="cert-chain">
 
 	<target host="degica.com" />
 	<target host="comipo.degica.com" />
diff --git a/src/chrome/content/rules/Computec-Academy.de.xml b/src/chrome/content/rules/Computec-Academy.de.xml
index 0696388d6db3..3c60ac354ac6 100644
--- a/src/chrome/content/rules/Computec-Academy.de.xml
+++ b/src/chrome/content/rules/Computec-Academy.de.xml
@@ -8,7 +8,7 @@
 	² Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Computec-Academy.de (partial)" default_off="missing certificate chain">
+<ruleset name="Computec-Academy.de (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/CryptoNetwork.com.xml b/src/chrome/content/rules/CryptoNetwork.com.xml
index 2233c48a0e04..5857ee96aa1a 100644
--- a/src/chrome/content/rules/CryptoNetwork.com.xml
+++ b/src/chrome/content/rules/CryptoNetwork.com.xml
@@ -3,7 +3,7 @@
 	www.cryptonetwork.com: Mismatched
 
 -->
-<ruleset name="CryptoNetwork.com" default_off="missing certificate chain">
+<ruleset name="CryptoNetwork.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/DBforums.xml b/src/chrome/content/rules/DBforums.xml
index 81b8d602d8a4..4f89fa66b763 100644
--- a/src/chrome/content/rules/DBforums.xml
+++ b/src/chrome/content/rules/DBforums.xml
@@ -18,7 +18,7 @@
 	* Secured by us
 
 -->
-<ruleset name="dBforums.com" default_off="missing certificate chain" platform="mixedcontent">
+<ruleset name="dBforums.com" default_off="cert-chain" platform="mixedcontent">
 
 	<target host="dbforums.com" />
 	<target host="www.dbforums.com" />
diff --git a/src/chrome/content/rules/De_Silva.biz.xml b/src/chrome/content/rules/De_Silva.biz.xml
index 0c95b466087c..cb3e99f2f974 100644
--- a/src/chrome/content/rules/De_Silva.biz.xml
+++ b/src/chrome/content/rules/De_Silva.biz.xml
@@ -7,7 +7,7 @@
 	* See https://whatsmychaincert.com
 
 -->
-<ruleset name="de Silva.biz" default_off="missing certificate chain">
+<ruleset name="de Silva.biz" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Deliveras.gr.xml b/src/chrome/content/rules/Deliveras.gr.xml
index 636d16fd8a34..1a0b63a5ad21 100644
--- a/src/chrome/content/rules/Deliveras.gr.xml
+++ b/src/chrome/content/rules/Deliveras.gr.xml
@@ -18,7 +18,7 @@
 	* Ruleset disabled by default
 
 -->
-<ruleset name="Deliveras.gr" default_off="missing certificate chain">
+<ruleset name="Deliveras.gr" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Devprom.ru.xml b/src/chrome/content/rules/Devprom.ru.xml
index 4c07fe3f440f..460c97b694bf 100644
--- a/src/chrome/content/rules/Devprom.ru.xml
+++ b/src/chrome/content/rules/Devprom.ru.xml
@@ -11,7 +11,7 @@
 	NB: Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Devprom.ru (partial)" default_off="missing certificate chain">
+<ruleset name="Devprom.ru (partial)" default_off="cert-chain">
 
 	<target host="devprom.ru" />
 	<target host="www.devprom.ru" />
diff --git a/src/chrome/content/rules/Dirty.ru.xml b/src/chrome/content/rules/Dirty.ru.xml
index a977b45ff9b3..ab9a05f2a7e9 100644
--- a/src/chrome/content/rules/Dirty.ru.xml
+++ b/src/chrome/content/rules/Dirty.ru.xml
@@ -6,7 +6,7 @@
 	* Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="dirty.ru" default_off="missing certificate chain">
+<ruleset name="dirty.ru" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/East-Northamptonshire.gov.uk.xml b/src/chrome/content/rules/East-Northamptonshire.gov.uk.xml
index 9b327d365c1d..a978837ac72e 100644
--- a/src/chrome/content/rules/East-Northamptonshire.gov.uk.xml
+++ b/src/chrome/content/rules/East-Northamptonshire.gov.uk.xml
@@ -29,7 +29,7 @@
 		- .www.east-northamptonshire.gov.uk
 
 -->
-<ruleset name="East-Northamptonshire.gov.uk (partial)" default_off="missing certificate chain">
+<ruleset name="East-Northamptonshire.gov.uk (partial)" default_off="cert-chain">
 
 	<target host="east-northamptonshire.gov.uk" />
 	<target host="www.east-northamptonshire.gov.uk" />
diff --git a/src/chrome/content/rules/EoPortal.org-problematic.xml b/src/chrome/content/rules/EoPortal.org-problematic.xml
index 376d08f66f93..db47af9612af 100644
--- a/src/chrome/content/rules/EoPortal.org-problematic.xml
+++ b/src/chrome/content/rules/EoPortal.org-problematic.xml
@@ -5,7 +5,7 @@
 	NB: Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="eoPortal.org (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="eoPortal.org (missing certificate chain)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Erlang.org.xml b/src/chrome/content/rules/Erlang.org.xml
index 18a1d5ede727..08313d212978 100644
--- a/src/chrome/content/rules/Erlang.org.xml
+++ b/src/chrome/content/rules/Erlang.org.xml
@@ -6,7 +6,7 @@
 		www1.erlang.org
 
 -->
-<ruleset name="Erlang" default_off="Missing certificate chain">
+<ruleset name="Erlang" default_off="cert-chain">
 
 	<target host="erlang.org" />
 	<target host="www.erlang.org" />
diff --git a/src/chrome/content/rules/Etravelway.com.xml b/src/chrome/content/rules/Etravelway.com.xml
index 8e8a3e32460a..58159b7c107c 100644
--- a/src/chrome/content/rules/Etravelway.com.xml
+++ b/src/chrome/content/rules/Etravelway.com.xml
@@ -18,7 +18,7 @@
 	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/
 
 -->
-<ruleset name="eTravelWay.com" default_off="missing certificate chain">
+<ruleset name="eTravelWay.com" default_off="cert-chain">
 
 	<target host="etravelway.com" />
 	<target host="www.etravelway.com" />
diff --git a/src/chrome/content/rules/Fhserve.com.xml b/src/chrome/content/rules/Fhserve.com.xml
index b07ed613574e..662c31bb21bc 100644
--- a/src/chrome/content/rules/Fhserve.com.xml
+++ b/src/chrome/content/rules/Fhserve.com.xml
@@ -28,7 +28,7 @@
 		- (www.)?	(^ → www)
 
 -->
-<ruleset name="fhserve.com" default_off="missing certificate chain">
+<ruleset name="fhserve.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Filebyid.com.xml b/src/chrome/content/rules/Filebyid.com.xml
index 174464afefba..38961a7864d6 100644
--- a/src/chrome/content/rules/Filebyid.com.xml
+++ b/src/chrome/content/rules/Filebyid.com.xml
@@ -2,7 +2,7 @@
 	NB: Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="filebyid.com" default_off="missing certificate chain">
+<ruleset name="filebyid.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/FinnChristiansen.de.xml b/src/chrome/content/rules/FinnChristiansen.de.xml
index 250b5fc8f32d..5bfdb6dc7eae 100644
--- a/src/chrome/content/rules/FinnChristiansen.de.xml
+++ b/src/chrome/content/rules/FinnChristiansen.de.xml
@@ -4,7 +4,7 @@
 		- css from $self
 
 -->
-<ruleset name="FinnChristiansen.de" default_off="untrusted root">
+<ruleset name="FinnChristiansen.de" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Flaska.net.xml b/src/chrome/content/rules/Flaska.net.xml
index be0e4c89b1b9..6edbe9ff0da8 100644
--- a/src/chrome/content/rules/Flaska.net.xml
+++ b/src/chrome/content/rules/Flaska.net.xml
@@ -23,7 +23,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Flaska.net (partial)" default_off="missing certificate chain">
+<ruleset name="Flaska.net (partial)" default_off="cert-chain">
 
 	<target host="*.flaska.net" />
 		<!--exclusion pattern="^http://jkt\.flaska\.net/" /-->
diff --git a/src/chrome/content/rules/Free_Bible_Software.com.xml b/src/chrome/content/rules/Free_Bible_Software.com.xml
index 398f6c3eee76..1548eed788a1 100644
--- a/src/chrome/content/rules/Free_Bible_Software.com.xml
+++ b/src/chrome/content/rules/Free_Bible_Software.com.xml
@@ -9,7 +9,7 @@
 		- www.freebiblesoftware.com
 
 -->
-<ruleset name="Free Bible Software.com" default_off="missing certificate chain">
+<ruleset name="Free Bible Software.com" default_off="cert-chain">
 
 	<target host="freebiblesoftware.com" />
 	<target host="development.freebiblesoftware.com" />
diff --git a/src/chrome/content/rules/Gna.xml b/src/chrome/content/rules/Gna.xml
index 512e276a61d4..6255f33c975b 100644
--- a/src/chrome/content/rules/Gna.xml
+++ b/src/chrome/content/rules/Gna.xml
@@ -12,7 +12,7 @@
 	NB: server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Gna.org (partial)" default_off="missing certificate chain">
+<ruleset name="Gna.org (partial)" default_off="cert-chain">
 
 	<target host="gna.org" />
 	<target host="mail.gna.org" />
diff --git a/src/chrome/content/rules/GoogleMelange.com.xml b/src/chrome/content/rules/GoogleMelange.com.xml
index 938144e37c7a..9f4871de6f56 100644
--- a/src/chrome/content/rules/GoogleMelange.com.xml
+++ b/src/chrome/content/rules/GoogleMelange.com.xml
@@ -2,7 +2,7 @@
 	For other Google coverage, see GoogleServices.xml.
 
 -->
-<ruleset name="GoogleMelange" default_off="missing certificate chain">
+<ruleset name="GoogleMelange" default_off="cert-chain">
 
 	<target host="google-melange.com" />
 	<target host="www.google-melange.com" />
diff --git a/src/chrome/content/rules/Guarantorus_Loans.co.uk.xml b/src/chrome/content/rules/Guarantorus_Loans.co.uk.xml
index 95917de5122f..e985a4f8b810 100644
--- a/src/chrome/content/rules/Guarantorus_Loans.co.uk.xml
+++ b/src/chrome/content/rules/Guarantorus_Loans.co.uk.xml
@@ -2,7 +2,7 @@
 	NB: Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Guarantorus Loans.co.uk" default_off="missing certificate chain">
+<ruleset name="Guarantorus Loans.co.uk" default_off="cert-chain">
 
 	<target host="guarantorusloans.co.uk" />
 	<target host="www.guarantorusloans.co.uk" />
diff --git a/src/chrome/content/rules/HKGov-ArchSD.xml b/src/chrome/content/rules/HKGov-ArchSD.xml
index e3706649f3ef..ec80db9dfeb2 100644
--- a/src/chrome/content/rules/HKGov-ArchSD.xml
+++ b/src/chrome/content/rules/HKGov-ArchSD.xml
@@ -1,7 +1,7 @@
 <!--
 	For other HK government coverage, see GovHK.xml.
 -->
-<ruleset name="Architectural Services Department" default_off="missing certificate chain">
+<ruleset name="Architectural Services Department" default_off="cert-chain">
 
 	<target host="www.archsd.gov.hk" />
 
diff --git a/src/chrome/content/rules/HotLog.ru.xml b/src/chrome/content/rules/HotLog.ru.xml
index 306fc41678d3..ddc9e5cc1932 100644
--- a/src/chrome/content/rules/HotLog.ru.xml
+++ b/src/chrome/content/rules/HotLog.ru.xml
@@ -16,7 +16,7 @@
 		- .hotlog.ru
 
 -->
-<ruleset name="HotLog.ru (partial)" default_off="missing certificate chain">
+<ruleset name="HotLog.ru (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/IRILL.org.xml b/src/chrome/content/rules/IRILL.org.xml
index 55ac29600b70..5a8140449323 100644
--- a/src/chrome/content/rules/IRILL.org.xml
+++ b/src/chrome/content/rules/IRILL.org.xml
@@ -3,7 +3,7 @@
 		coinst.irill.org
 
 -->
-<ruleset name="IRILL.org" default_off="missing certificate chain">
+<ruleset name="IRILL.org" default_off="cert-chain">
 
 	<target host="www.irill.org" />
 
diff --git a/src/chrome/content/rules/InfoWar.com.xml b/src/chrome/content/rules/InfoWar.com.xml
index c63fb0c3c86f..d51d61b57c1e 100644
--- a/src/chrome/content/rules/InfoWar.com.xml
+++ b/src/chrome/content/rules/InfoWar.com.xml
@@ -18,7 +18,7 @@
 	* Secured by us
 
 -->
-<ruleset name="InfoWar.com" default_off="missing certificate chain">
+<ruleset name="InfoWar.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/JSBi.org.xml b/src/chrome/content/rules/JSBi.org.xml
index 9aaaf421e8e2..54f8de8e7547 100644
--- a/src/chrome/content/rules/JSBi.org.xml
+++ b/src/chrome/content/rules/JSBi.org.xml
@@ -2,7 +2,7 @@
 	NB: Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="JSBi.org" default_off="missing certificate chain">
+<ruleset name="JSBi.org" default_off="cert-chain">
 
 	<target host="jsbi.org" />
 	<target host="www.jsbi.org" />
diff --git a/src/chrome/content/rules/JWChat.org.xml b/src/chrome/content/rules/JWChat.org.xml
index c8ac63c7da34..c397259d44c8 100644
--- a/src/chrome/content/rules/JWChat.org.xml
+++ b/src/chrome/content/rules/JWChat.org.xml
@@ -4,7 +4,7 @@
 	* See https://whatsmychaincert.com
 
 -->
-<ruleset name="JWChat.org" default_off="missing certificate chain">
+<ruleset name="JWChat.org" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Kbia-gmbh.de.xml b/src/chrome/content/rules/Kbia-gmbh.de.xml
index 8653980ee51e..f19f6db6a788 100644
--- a/src/chrome/content/rules/Kbia-gmbh.de.xml
+++ b/src/chrome/content/rules/Kbia-gmbh.de.xml
@@ -18,7 +18,7 @@
 		- cloud.kbia-gmbh.de
 
 -->
-<ruleset name="kbia-gmbh.de (partial)" default_off="missing certificate chain">
+<ruleset name="kbia-gmbh.de (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Keygens.nl.xml b/src/chrome/content/rules/Keygens.nl.xml
index 162620ba7d0b..7dbcf3e5fb8a 100644
--- a/src/chrome/content/rules/Keygens.nl.xml
+++ b/src/chrome/content/rules/Keygens.nl.xml
@@ -4,7 +4,7 @@
 	www.keygens.nl: Mismatched
 
 -->
-<ruleset name="Keygens.nl" default_off="missing certificate chain">
+<ruleset name="Keygens.nl" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Knowledge_Blog.org.xml b/src/chrome/content/rules/Knowledge_Blog.org.xml
index c0d396af0c2d..5b18b3026535 100644
--- a/src/chrome/content/rules/Knowledge_Blog.org.xml
+++ b/src/chrome/content/rules/Knowledge_Blog.org.xml
@@ -9,7 +9,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Knowledge Blog.org" default_off="missing certificate chain">
+<ruleset name="Knowledge Blog.org" default_off="cert-chain">
 
 	<target host="knowledgeblog.org" />
 	<target host="bio-ontologies.knowledgeblog.org" />
diff --git a/src/chrome/content/rules/LVOC.org.xml b/src/chrome/content/rules/LVOC.org.xml
index 16661fb4f043..62eb9d393605 100644
--- a/src/chrome/content/rules/LVOC.org.xml
+++ b/src/chrome/content/rules/LVOC.org.xml
@@ -11,7 +11,7 @@
 	ˢ Secured by us
 
 -->
-<ruleset name="LVOC.org" default_off="missing certificate chain">
+<ruleset name="LVOC.org" default_off="cert-chain">
 
 	<target host="lvoc.org" />
 	<target host="*.lvoc.org" />
diff --git a/src/chrome/content/rules/LifeReimagined.org.xml b/src/chrome/content/rules/LifeReimagined.org.xml
index 2a2b7d39cc4d..4fef1f52c04e 100644
--- a/src/chrome/content/rules/LifeReimagined.org.xml
+++ b/src/chrome/content/rules/LifeReimagined.org.xml
@@ -6,7 +6,7 @@
 	* Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="LifeReimagined.org" default_off="missing certificate chain">
+<ruleset name="LifeReimagined.org" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Lincs_to_the_Past.com.xml b/src/chrome/content/rules/Lincs_to_the_Past.com.xml
index 73701f76d658..2fb9abed0e32 100644
--- a/src/chrome/content/rules/Lincs_to_the_Past.com.xml
+++ b/src/chrome/content/rules/Lincs_to_the_Past.com.xml
@@ -13,7 +13,7 @@
 		- Images from $self
 
 -->
-<ruleset name="Lincs to the Past.com" default_off="missing certificate chain">
+<ruleset name="Lincs to the Past.com" default_off="cert-chain">
 
 	<target host="www.lincstothepast.com" />
 
diff --git a/src/chrome/content/rules/LinuxMIPS.xml b/src/chrome/content/rules/LinuxMIPS.xml
index c12bf2cf1ac6..30f6a2c98d55 100644
--- a/src/chrome/content/rules/LinuxMIPS.xml
+++ b/src/chrome/content/rules/LinuxMIPS.xml
@@ -12,7 +12,7 @@
 		- patchwork.linux-mips.org
 
 -->
-<ruleset name="Linux-MIPS.org (partial)" default_off="missing certificate chain">
+<ruleset name="Linux-MIPS.org (partial)" default_off="cert-chain">
 
 	<target host="bugs.linux-mips.org" />
 	<target host="cvs.linux-mips.org" />
diff --git a/src/chrome/content/rules/LinuxTag.org.xml b/src/chrome/content/rules/LinuxTag.org.xml
index aaf0059a663d..2b4b061b029b 100644
--- a/src/chrome/content/rules/LinuxTag.org.xml
+++ b/src/chrome/content/rules/LinuxTag.org.xml
@@ -9,7 +9,7 @@
 		- openmusic.linuxtag.org
 
 -->
-<ruleset name="LinuxTag.org" default_off="missing certificate chain">
+<ruleset name="LinuxTag.org" default_off="cert-chain">
 	<target host="linuxtag.org" />
 	<target host="www.linuxtag.org" />
 	<target host="intern.linuxtag.org" />
diff --git a/src/chrome/content/rules/MailNull.com.xml b/src/chrome/content/rules/MailNull.com.xml
index d793834b06b6..76089b4de9c6 100644
--- a/src/chrome/content/rules/MailNull.com.xml
+++ b/src/chrome/content/rules/MailNull.com.xml
@@ -7,7 +7,7 @@
 	¹ Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="MailNull.com" default_off="missing certificate chain">
+<ruleset name="MailNull.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Makrotex.hu.xml b/src/chrome/content/rules/Makrotex.hu.xml
index aa0d6b13c905..d64914c7e8f9 100644
--- a/src/chrome/content/rules/Makrotex.hu.xml
+++ b/src/chrome/content/rules/Makrotex.hu.xml
@@ -18,7 +18,7 @@
 	² Unsecurable <= plaintext reply
 
 -->
-<ruleset name="Makrotex.hu" default_off="missing certificate chain">
+<ruleset name="Makrotex.hu" default_off="cert-chain">
 
 	<target host="makrotex.hu" />
 	<target host="www.makrotex.hu" />
diff --git a/src/chrome/content/rules/Metaboli.co.uk.xml b/src/chrome/content/rules/Metaboli.co.uk.xml
index fb6657daa162..ea40bf1df140 100644
--- a/src/chrome/content/rules/Metaboli.co.uk.xml
+++ b/src/chrome/content/rules/Metaboli.co.uk.xml
@@ -17,7 +17,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Metaboli.co.uk" default_off="missing certificate chain">
+<ruleset name="Metaboli.co.uk" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Moodle.net-problematic.xml b/src/chrome/content/rules/Moodle.net-problematic.xml
index 0421e5d7a966..2eb77107c9da 100644
--- a/src/chrome/content/rules/Moodle.net-problematic.xml
+++ b/src/chrome/content/rules/Moodle.net-problematic.xml
@@ -2,7 +2,7 @@
 	For rules that are on by default, see Moodle.net.xml.
 
 -->
-<ruleset name="Moodle.net (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="Moodle.net (missing certificate chain)" default_off="cert-chain">
 
 	<target host="messages.moodle.net" />
 
diff --git a/src/chrome/content/rules/Mountyhall.com.xml b/src/chrome/content/rules/Mountyhall.com.xml
index 3f0b998da86a..33ab7c429614 100644
--- a/src/chrome/content/rules/Mountyhall.com.xml
+++ b/src/chrome/content/rules/Mountyhall.com.xml
@@ -19,7 +19,7 @@
 		phpmyadmin.mountyhall.com
 
 -->
-<ruleset name="Mountyhall" default_off="missing certificate chain">
+<ruleset name="Mountyhall" default_off="cert-chain">
 
 	<target host="www.mountyhall.com" />
 	<target host="games.mountyhall.com" />
diff --git a/src/chrome/content/rules/Mutterschaftsgeld.de.xml b/src/chrome/content/rules/Mutterschaftsgeld.de.xml
index 31c18b441755..d1fe97887431 100644
--- a/src/chrome/content/rules/Mutterschaftsgeld.de.xml
+++ b/src/chrome/content/rules/Mutterschaftsgeld.de.xml
@@ -1,4 +1,4 @@
-<ruleset name="Mutterschaftsgeld.de" default_off="missing certificate chain">
+<ruleset name="Mutterschaftsgeld.de" default_off="cert-chain">
 
 	<target host="mutterschaftsgeld.de" />
 	<target host="www.mutterschaftsgeld.de" />
diff --git a/src/chrome/content/rules/My_Shazam.com.xml b/src/chrome/content/rules/My_Shazam.com.xml
index 87f1c1824efb..ace0334bd44d 100644
--- a/src/chrome/content/rules/My_Shazam.com.xml
+++ b/src/chrome/content/rules/My_Shazam.com.xml
@@ -11,7 +11,7 @@
 		- myshazam.com
 
 -->
-<ruleset name="My Shazam.com" default_off="missing certificate chain">
+<ruleset name="My Shazam.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/NPAC.com.xml b/src/chrome/content/rules/NPAC.com.xml
index 2ad10b8cf991..debade23e1b0 100644
--- a/src/chrome/content/rules/NPAC.com.xml
+++ b/src/chrome/content/rules/NPAC.com.xml
@@ -14,7 +14,7 @@
 		- www.npac.com
 
 -->
-<ruleset name="NPAC.com" default_off="missing certificate chain">
+<ruleset name="NPAC.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/North-Carolina-State-University-problematic.xml b/src/chrome/content/rules/North-Carolina-State-University-problematic.xml
index faf60e17c496..91e6f016a081 100644
--- a/src/chrome/content/rules/North-Carolina-State-University-problematic.xml
+++ b/src/chrome/content/rules/North-Carolina-State-University-problematic.xml
@@ -2,7 +2,7 @@
 	For rules that are on by default, see North-Carolina-State-University.xml.
 
 -->
-<ruleset name="NCSU.edu (problematic)" default_off="missing certificate chain">
+<ruleset name="NCSU.edu (problematic)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/OnionCat.org.xml b/src/chrome/content/rules/OnionCat.org.xml
index 29f49206b072..ec9425c5d26e 100644
--- a/src/chrome/content/rules/OnionCat.org.xml
+++ b/src/chrome/content/rules/OnionCat.org.xml
@@ -5,7 +5,7 @@
 	^onioncat.org: Mismatched
 
 -->
-<ruleset name="OnionCat.org" default_off="missing certificate chain">
+<ruleset name="OnionCat.org" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/OpenSC-Project.xml b/src/chrome/content/rules/OpenSC-Project.xml
index 521811ffbeef..dad05979a6c6 100644
--- a/src/chrome/content/rules/OpenSC-Project.xml
+++ b/src/chrome/content/rules/OpenSC-Project.xml
@@ -10,7 +10,7 @@
 		 - www.opensc-project.org
 
 -->
-<ruleset name="OpenSC-Project.org" default_off="missing certificate chain">
+<ruleset name="OpenSC-Project.org" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Open_Culture.com-problematic.xml b/src/chrome/content/rules/Open_Culture.com-problematic.xml
index c299c0805b58..1c6831b72fc1 100644
--- a/src/chrome/content/rules/Open_Culture.com-problematic.xml
+++ b/src/chrome/content/rules/Open_Culture.com-problematic.xml
@@ -2,7 +2,7 @@
 	For rules that are on by default, see Open_Culture.com.xml.
 
 -->
-<ruleset name="Open Culture.com (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="Open Culture.com (missing certificate chain)" default_off="cert-chain">
 
 	<target host="openculture.com" />
 	<target host="www.openculture.com" />
diff --git a/src/chrome/content/rules/Open_InfoSec_Foundation.org-problematic.xml b/src/chrome/content/rules/Open_InfoSec_Foundation.org-problematic.xml
index 96c9fb25b774..ebadc3247b57 100644
--- a/src/chrome/content/rules/Open_InfoSec_Foundation.org-problematic.xml
+++ b/src/chrome/content/rules/Open_InfoSec_Foundation.org-problematic.xml
@@ -7,7 +7,7 @@
 	* See https://whatsmychaincert.com
 
 -->
-<ruleset name="Open InfoSec Foundation.org (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="Open InfoSec Foundation.org (missing certificate chain)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Open_Source.org-problematic.xml b/src/chrome/content/rules/Open_Source.org-problematic.xml
index 945f77708664..ca67a35ef15e 100644
--- a/src/chrome/content/rules/Open_Source.org-problematic.xml
+++ b/src/chrome/content/rules/Open_Source.org-problematic.xml
@@ -9,7 +9,7 @@
 	* Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Open Source.org (problematic)" default_off="missing certificate chain">
+<ruleset name="Open Source.org (problematic)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Os-cillation-mismatches.xml b/src/chrome/content/rules/Os-cillation-mismatches.xml
index 27898a68ecf7..5944dc245ada 100644
--- a/src/chrome/content/rules/Os-cillation-mismatches.xml
+++ b/src/chrome/content/rules/Os-cillation-mismatches.xml
@@ -15,7 +15,7 @@
 		- anfrage.os-cillation.de
 
 -->
-<ruleset name="os-cillation.de (partial)" default_off="missing certificate chain">
+<ruleset name="os-cillation.de (partial)" default_off="cert-chain">
 
 	<target host="os-cillation.de"/>
 	<target host="anfrage.os-cillation.de"/>
diff --git a/src/chrome/content/rules/Pendle.gov.uk.xml b/src/chrome/content/rules/Pendle.gov.uk.xml
index 519847af7e1a..ee21c255a077 100644
--- a/src/chrome/content/rules/Pendle.gov.uk.xml
+++ b/src/chrome/content/rules/Pendle.gov.uk.xml
@@ -21,7 +21,7 @@
 		- .www.pendle.gov.uk
 
 -->
-<ruleset name="Pendle.gov.uk" default_off="missing certificate chain">
+<ruleset name="Pendle.gov.uk" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/PersonalityPage.com.xml b/src/chrome/content/rules/PersonalityPage.com.xml
index 2b905b1fcd4e..e8b32ba6fdfb 100644
--- a/src/chrome/content/rules/PersonalityPage.com.xml
+++ b/src/chrome/content/rules/PersonalityPage.com.xml
@@ -1,4 +1,4 @@
-<ruleset name="Personality Page" default_off="missing certificate chain">
+<ruleset name="Personality Page" default_off="cert-chain">
 
 	<target host="personalitypage.com" />
 	<target host="www.personalitypage.com" />
diff --git a/src/chrome/content/rules/Playboy_Store.com.xml b/src/chrome/content/rules/Playboy_Store.com.xml
index 42cfeba0bb39..2e7100bbb5d1 100644
--- a/src/chrome/content/rules/Playboy_Store.com.xml
+++ b/src/chrome/content/rules/Playboy_Store.com.xml
@@ -10,7 +10,7 @@
 		- .www.playboystore.com
 
 -->
-<ruleset name="Playboy Store.com" default_off="missing certificate chain">
+<ruleset name="Playboy Store.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/PowerTech.no-problematic.xml b/src/chrome/content/rules/PowerTech.no-problematic.xml
index e06985641c32..66ded7654e63 100644
--- a/src/chrome/content/rules/PowerTech.no-problematic.xml
+++ b/src/chrome/content/rules/PowerTech.no-problematic.xml
@@ -2,7 +2,7 @@
 	For rules that are on by default, see PowerTech.no.xml.
 
 -->
-<ruleset name="PowerTech.no (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="PowerTech.no (missing certificate chain)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Prxy.com.xml b/src/chrome/content/rules/Prxy.com.xml
index f27b974d3ddc..a6c352e47eb7 100644
--- a/src/chrome/content/rules/Prxy.com.xml
+++ b/src/chrome/content/rules/Prxy.com.xml
@@ -13,7 +13,7 @@
 		- .prxy.com
 
 -->
-<ruleset name="prxy.com" default_off="missing certificate chain">
+<ruleset name="prxy.com" default_off="cert-chain">
 
 	<target host="prxy.com" />
 
diff --git a/src/chrome/content/rules/Quto.ru.xml b/src/chrome/content/rules/Quto.ru.xml
index f5e91cf55514..5e243957ad84 100644
--- a/src/chrome/content/rules/Quto.ru.xml
+++ b/src/chrome/content/rules/Quto.ru.xml
@@ -9,7 +9,7 @@
 	* Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Quto.ru (partial)" default_off="missing certificate chain">
+<ruleset name="Quto.ru (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/RYOT.xml b/src/chrome/content/rules/RYOT.xml
index 04fafa05fc58..4ae7eafd9a07 100644
--- a/src/chrome/content/rules/RYOT.xml
+++ b/src/chrome/content/rules/RYOT.xml
@@ -12,7 +12,7 @@
 	* See https://whatsmychaincert.com
 
 -->
-<ruleset name="RYOT (partial)" default_off="missing certificate chain">
+<ruleset name="RYOT (partial)" default_off="cert-chain">
 
 	<target host="ryot.org" />
 	<target host="www.ryot.org" />
diff --git a/src/chrome/content/rules/Redpill-Linpro.xml b/src/chrome/content/rules/Redpill-Linpro.xml
index 1ebe54df36c5..d6d45d5f9c28 100644
--- a/src/chrome/content/rules/Redpill-Linpro.xml
+++ b/src/chrome/content/rules/Redpill-Linpro.xml
@@ -6,7 +6,7 @@
 		- (www.)redpill-linpro.se
 
 -->
-<ruleset name="Redpill-Linpro.com (partial)" default_off="missing certificate chain">
+<ruleset name="Redpill-Linpro.com (partial)" default_off="cert-chain">
 
 	<target host="portal.redpill-linpro.com" />
 
diff --git a/src/chrome/content/rules/Resinfo.org.xml b/src/chrome/content/rules/Resinfo.org.xml
index f648b3097bce..5ac266667cdd 100644
--- a/src/chrome/content/rules/Resinfo.org.xml
+++ b/src/chrome/content/rules/Resinfo.org.xml
@@ -9,7 +9,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Resinfo.org" default_off="missing certificate chain">
+<ruleset name="Resinfo.org" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Safari_Flow.com.xml b/src/chrome/content/rules/Safari_Flow.com.xml
index 0bed6fd4ce1f..5a6b1c831ec6 100644
--- a/src/chrome/content/rules/Safari_Flow.com.xml
+++ b/src/chrome/content/rules/Safari_Flow.com.xml
@@ -18,7 +18,7 @@
 	* Unsecurable <= http reply
 
 -->
-<ruleset name="Safari Flow.com (partial)" default_off="missing certificate chain">
+<ruleset name="Safari Flow.com (partial)" default_off="cert-chain">
 
 	<target host="safariflow.com" />
 	<target host="www.safariflow.com" />
diff --git a/src/chrome/content/rules/SecDev.ca.xml b/src/chrome/content/rules/SecDev.ca.xml
index f23dc09c4e07..7a27c21eb9c2 100644
--- a/src/chrome/content/rules/SecDev.ca.xml
+++ b/src/chrome/content/rules/SecDev.ca.xml
@@ -9,7 +9,7 @@
 	* Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="SecDev.ca" default_off="missing certificate chain">
+<ruleset name="SecDev.ca" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/ShareFile_support.com-problematic.xml b/src/chrome/content/rules/ShareFile_support.com-problematic.xml
index e5ccc0912872..77ec5650e604 100644
--- a/src/chrome/content/rules/ShareFile_support.com-problematic.xml
+++ b/src/chrome/content/rules/ShareFile_support.com-problematic.xml
@@ -7,7 +7,7 @@
 	* See https://whatsmychaincert.com
 
 -->
-<ruleset name="ShareFile support.com (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="ShareFile support.com (missing certificate chain)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/SilverRush_Style.xml b/src/chrome/content/rules/SilverRush_Style.xml
index 566393f497ac..faeb986e492a 100644
--- a/src/chrome/content/rules/SilverRush_Style.xml
+++ b/src/chrome/content/rules/SilverRush_Style.xml
@@ -16,7 +16,7 @@
 		- .silverrushstyle.com
 
 -->
-<ruleset name="SilverRush Style.com" default_off="missing certificate chain">
+<ruleset name="SilverRush Style.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/SimilarGroup.com.xml b/src/chrome/content/rules/SimilarGroup.com.xml
index dfad0ff9eade..606744272218 100644
--- a/src/chrome/content/rules/SimilarGroup.com.xml
+++ b/src/chrome/content/rules/SimilarGroup.com.xml
@@ -9,7 +9,7 @@
 	* Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="SimilarGroup.com (partial)" default_off="missing certificate chain">
+<ruleset name="SimilarGroup.com (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Stacklet.com.xml b/src/chrome/content/rules/Stacklet.com.xml
index 730ae1c162ad..0d1eb727a2d8 100644
--- a/src/chrome/content/rules/Stacklet.com.xml
+++ b/src/chrome/content/rules/Stacklet.com.xml
@@ -14,7 +14,7 @@
 	* Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Stacklet.com (partial)" default_off="missing certificate chain">
+<ruleset name="Stacklet.com (partial)" default_off="cert-chain">
 
 	<target host="stacklet.com" />
 	<target host="secure.stacklet.com" />
diff --git a/src/chrome/content/rules/Superfast-Openreach.co.uk.xml b/src/chrome/content/rules/Superfast-Openreach.co.uk.xml
index 3c5a2874592a..344fa466a2c0 100644
--- a/src/chrome/content/rules/Superfast-Openreach.co.uk.xml
+++ b/src/chrome/content/rules/Superfast-Openreach.co.uk.xml
@@ -10,7 +10,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Superfast-Openreach.co.uk" default_off="missing certificate chain">
+<ruleset name="Superfast-Openreach.co.uk" default_off="cert-chain">
 
 	<target host="superfast-openreach.co.uk" />
 	<target host="www.superfast-openreach.co.uk" />
diff --git a/src/chrome/content/rules/TKK.fi.xml b/src/chrome/content/rules/TKK.fi.xml
index e6294f127dd3..5e2499164644 100644
--- a/src/chrome/content/rules/TKK.fi.xml
+++ b/src/chrome/content/rules/TKK.fi.xml
@@ -6,7 +6,7 @@
 	* Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="TKK.fi" default_off="missing certificate chain">
+<ruleset name="TKK.fi" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Teddy_Online_Judge.net.xml b/src/chrome/content/rules/Teddy_Online_Judge.net.xml
index 62800eca99b8..207c47770498 100644
--- a/src/chrome/content/rules/Teddy_Online_Judge.net.xml
+++ b/src/chrome/content/rules/Teddy_Online_Judge.net.xml
@@ -8,7 +8,7 @@
 		- www.teddyonlinejudge.net
 
 -->
-<ruleset name="Teddy Online Judge.net" default_off="missing certificate chain">
+<ruleset name="Teddy Online Judge.net" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Travelspecialistsite.com.xml b/src/chrome/content/rules/Travelspecialistsite.com.xml
index 71379139b405..f63c24a2ca8f 100644
--- a/src/chrome/content/rules/Travelspecialistsite.com.xml
+++ b/src/chrome/content/rules/Travelspecialistsite.com.xml
@@ -16,7 +16,7 @@
 		- www.manager.travelspecialistsite.com
 
 -->
-<ruleset name="travelspecialistsite.com" default_off="missing certificate chain">
+<ruleset name="travelspecialistsite.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/UC_Hastings.edu-problematic.xml b/src/chrome/content/rules/UC_Hastings.edu-problematic.xml
index d5d825d4eee8..a5032d150891 100644
--- a/src/chrome/content/rules/UC_Hastings.edu-problematic.xml
+++ b/src/chrome/content/rules/UC_Hastings.edu-problematic.xml
@@ -2,7 +2,7 @@
 	For rules that are on by default, see UC_Hastings.edu.xml.
 
 -->
-<ruleset name="UC Hastings.edu (problematic)" default_off="missing certificate chain">
+<ruleset name="UC Hastings.edu (problematic)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/UProd.biz.xml b/src/chrome/content/rules/UProd.biz.xml
index b89dce1f54fe..91e68289e336 100644
--- a/src/chrome/content/rules/UProd.biz.xml
+++ b/src/chrome/content/rules/UProd.biz.xml
@@ -4,7 +4,7 @@
 	* See https://whatsmychaincert.com
 
 -->
-<ruleset name="uProd.biz" default_off="missing certificate chain">
+<ruleset name="uProd.biz" default_off="cert-chain">
 
 	<target host="uprod.biz" />
 	<target host="www.uprod.biz" />
diff --git a/src/chrome/content/rules/USDA-ARS.xml b/src/chrome/content/rules/USDA-ARS.xml
index 68f5c56cdf71..4ef3735f3745 100644
--- a/src/chrome/content/rules/USDA-ARS.xml
+++ b/src/chrome/content/rules/USDA-ARS.xml
@@ -2,7 +2,7 @@
 	For rules that are on by default, see United-States-Department-of-Agriculture.xml.
 
 -->
-<ruleset name="USDA-ARS" default_off="missing certificate chain">
+<ruleset name="USDA-ARS" default_off="cert-chain">
 
 	<target host="www.ars.usda.gov" />
 
diff --git a/src/chrome/content/rules/United-States-Nuclear-Regulatory-Commission.xml b/src/chrome/content/rules/United-States-Nuclear-Regulatory-Commission.xml
index 02fada26172b..6ece8e3a1376 100644
--- a/src/chrome/content/rules/United-States-Nuclear-Regulatory-Commission.xml
+++ b/src/chrome/content/rules/United-States-Nuclear-Regulatory-Commission.xml
@@ -17,7 +17,7 @@
 	ᵐ Mismatched
 
 -->
-<ruleset name="NRC.gov" default_off="missing certificate chain">
+<ruleset name="NRC.gov" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Upickem.net.xml b/src/chrome/content/rules/Upickem.net.xml
index 881b3ff28da9..7fda3b7efa7c 100644
--- a/src/chrome/content/rules/Upickem.net.xml
+++ b/src/chrome/content/rules/Upickem.net.xml
@@ -48,7 +48,7 @@
 	* Secured by us
 
 -->
-<ruleset name="upickem.net (partial)" default_off="missing certificate chain" platform="mixedcontent">
+<ruleset name="upickem.net (partial)" default_off="cert-chain" platform="mixedcontent">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/VPS.net-problematic.xml b/src/chrome/content/rules/VPS.net-problematic.xml
index 82b31992359d..531ea96c573e 100644
--- a/src/chrome/content/rules/VPS.net-problematic.xml
+++ b/src/chrome/content/rules/VPS.net-problematic.xml
@@ -2,7 +2,7 @@
 	For rules that are on by default, see VPS.net.xml.
 
 -->
-<ruleset name="VPS.net (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="VPS.net (missing certificate chain)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Valtiolle.fi-problematic.xml b/src/chrome/content/rules/Valtiolle.fi-problematic.xml
index 84d2c4a9e4c2..b53a331aa698 100644
--- a/src/chrome/content/rules/Valtiolle.fi-problematic.xml
+++ b/src/chrome/content/rules/Valtiolle.fi-problematic.xml
@@ -2,7 +2,7 @@
 	For rules that are on by default, see Valtiolle.fi.xml.
 	
 -->
-<ruleset name="Valtiolle.fi (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="Valtiolle.fi (missing certificate chain)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Vesess.xml b/src/chrome/content/rules/Vesess.xml
index f5ee327aeb85..560458b12aa7 100644
--- a/src/chrome/content/rules/Vesess.xml
+++ b/src/chrome/content/rules/Vesess.xml
@@ -14,7 +14,7 @@
 	* Shows default page
 
 -->
-<ruleset name="CurdBee.com (partial)" default_off="untrusted root">
+<ruleset name="CurdBee.com (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/WalletGenerator.net.xml b/src/chrome/content/rules/WalletGenerator.net.xml
index a55debba05cd..f9f06273712a 100644
--- a/src/chrome/content/rules/WalletGenerator.net.xml
+++ b/src/chrome/content/rules/WalletGenerator.net.xml
@@ -5,7 +5,7 @@
 	www.walletgenerator.net: Shows default page
 
 -->
-<ruleset name="WalletGenerator.net" default_off="missing certificate chain">
+<ruleset name="WalletGenerator.net" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/West_Devon.gov.uk.xml b/src/chrome/content/rules/West_Devon.gov.uk.xml
index cee9a7d94edd..cbdb7fe4f27e 100644
--- a/src/chrome/content/rules/West_Devon.gov.uk.xml
+++ b/src/chrome/content/rules/West_Devon.gov.uk.xml
@@ -14,7 +14,7 @@
 	NB: Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="West Devon.gov.uk (partial)" default_off="missing certificate chain">
+<ruleset name="West Devon.gov.uk (partial)" default_off="cert-chain">
 
 	<target host="westdevon.gov.uk" />
 	<target host="www.westdevon.gov.uk" />
diff --git a/src/chrome/content/rules/X2Go.org.xml b/src/chrome/content/rules/X2Go.org.xml
index 82d9bcf25303..caa3ea4bf289 100644
--- a/src/chrome/content/rules/X2Go.org.xml
+++ b/src/chrome/content/rules/X2Go.org.xml
@@ -15,7 +15,7 @@
 	² Mismatched
 
 -->
-<ruleset name="X2Go.org" default_off="untrusted root">
+<ruleset name="X2Go.org" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/XMission.com-problematic.xml b/src/chrome/content/rules/XMission.com-problematic.xml
index 55f9cca7cf97..b57e6617430f 100644
--- a/src/chrome/content/rules/XMission.com-problematic.xml
+++ b/src/chrome/content/rules/XMission.com-problematic.xml
@@ -7,7 +7,7 @@
 	* see https://whatsmychaincert.com
 
 -->
-<ruleset name="XMission.com (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="XMission.com (missing certificate chain)" default_off="cert-chain">
 
 	<target host="accounting.xmission.com" />
 	<target host="asset.xmission.com" />
diff --git a/src/chrome/content/rules/Xfire.xml b/src/chrome/content/rules/Xfire.xml
index bf9979e55c75..b97f3f5a1c3e 100644
--- a/src/chrome/content/rules/Xfire.xml
+++ b/src/chrome/content/rules/Xfire.xml
@@ -30,7 +30,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Xfire.com (partial)" default_off="missing certificate chain">
+<ruleset name="Xfire.com (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Xiscosoft.es.xml b/src/chrome/content/rules/Xiscosoft.es.xml
index f12dddb0ab39..dd49640a0266 100644
--- a/src/chrome/content/rules/Xiscosoft.es.xml
+++ b/src/chrome/content/rules/Xiscosoft.es.xml
@@ -30,7 +30,7 @@
 	* Secured by us, doesn't trip MCB
 
 -->
-<ruleset name="Xiscosoft.es" default_off="missing certificate chain">
+<ruleset name="Xiscosoft.es" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/YMCA_of_Greater_St_Louis.xml b/src/chrome/content/rules/YMCA_of_Greater_St_Louis.xml
index 23bc75de86c5..61d539257189 100644
--- a/src/chrome/content/rules/YMCA_of_Greater_St_Louis.xml
+++ b/src/chrome/content/rules/YMCA_of_Greater_St_Louis.xml
@@ -5,7 +5,7 @@
 	^ymcastlouis.org: Cert only matches www.ymcastlouis.org
 
 -->
-<ruleset name="YMCA of Greater St. Louis" default_off="missing certificate chain">
+<ruleset name="YMCA of Greater St. Louis" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/YourMembership.com.xml b/src/chrome/content/rules/YourMembership.com.xml
index a99acde54790..e68d80b0bcb9 100644
--- a/src/chrome/content/rules/YourMembership.com.xml
+++ b/src/chrome/content/rules/YourMembership.com.xml
@@ -12,7 +12,7 @@
 	* Secured by us
 
 -->
-<ruleset name="YourMembership.com" default_off="missing certificate chain">
+<ruleset name="YourMembership.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/ZDmcirc.com.xml b/src/chrome/content/rules/ZDmcirc.com.xml
index cbd141ed60b1..ec40a2a33dad 100644
--- a/src/chrome/content/rules/ZDmcirc.com.xml
+++ b/src/chrome/content/rules/ZDmcirc.com.xml
@@ -12,7 +12,7 @@
 	* Secured by us
 
 -->
-<ruleset name="ZDmcirc.com" default_off="missing certificate chain">
+<ruleset name="ZDmcirc.com" default_off="cert-chain">
 
 	<target host="zdmcirc.com" />
 	<target host="www.zdmcirc.com" />
diff --git a/src/chrome/content/rules/ZXIDP.org.xml b/src/chrome/content/rules/ZXIDP.org.xml
index 93cd721faf38..071a6c82f89c 100644
--- a/src/chrome/content/rules/ZXIDP.org.xml
+++ b/src/chrome/content/rules/ZXIDP.org.xml
@@ -4,7 +4,7 @@
 	www.zxidp.org: cert only matches ^zxidp.org
 
 -->
-<ruleset name="ZXIDP.org" default_off="missing certificate chain">
+<ruleset name="ZXIDP.org" default_off="cert-chain">
 
 	<target host="zxidp.org" />
 	<target host="www.zxidp.org" />
diff --git a/src/chrome/content/rules/Zeusclicks.com.xml b/src/chrome/content/rules/Zeusclicks.com.xml
index 3ed9f7e7f149..1fea83690c14 100644
--- a/src/chrome/content/rules/Zeusclicks.com.xml
+++ b/src/chrome/content/rules/Zeusclicks.com.xml
@@ -32,7 +32,7 @@
 		- Images on (www.)? from ^zeusclicks.com
 
 -->
-<ruleset name="ZeusClicks.com (partial)" default_off="missing certificate chain">
+<ruleset name="ZeusClicks.com (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Zoomshare.xml b/src/chrome/content/rules/Zoomshare.xml
index 9ecffacfc540..f37b544a2d9b 100644
--- a/src/chrome/content/rules/Zoomshare.xml
+++ b/src/chrome/content/rules/Zoomshare.xml
@@ -11,7 +11,7 @@
 	* Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Zoomshare.com (partial)" default_off="missing certificate chain">
+<ruleset name="Zoomshare.com (partial)" default_off="cert-chain">
 
 	<target host="ssl.zoomshare.com" />
 
diff --git a/src/chrome/content/rules/accessedge.com.xml b/src/chrome/content/rules/accessedge.com.xml
index f321a7f36c38..ebba144c0157 100644
--- a/src/chrome/content/rules/accessedge.com.xml
+++ b/src/chrome/content/rules/accessedge.com.xml
@@ -18,7 +18,7 @@
 		- www2.accessedge.com
 
 -->
-<ruleset name="AccessEdge.com" default_off="missing certificate chain">
+<ruleset name="AccessEdge.com" default_off="cert-chain">
 
 	<!--	Complications:
 				-->
diff --git a/src/chrome/content/rules/alliance-media.org.uk.xml b/src/chrome/content/rules/alliance-media.org.uk.xml
index 80fbf2e65c92..862cd85950a2 100644
--- a/src/chrome/content/rules/alliance-media.org.uk.xml
+++ b/src/chrome/content/rules/alliance-media.org.uk.xml
@@ -2,7 +2,7 @@
 	NB: server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Alliance-Media.org.uk" default_off="missing certificate chain">
+<ruleset name="Alliance-Media.org.uk" default_off="cert-chain">
 
 	<target host="alliance-media.org.uk" />
 	<target host="www.alliance-media.org.uk" />
diff --git a/src/chrome/content/rules/companic.nl.xml b/src/chrome/content/rules/companic.nl.xml
index 4867ffad4831..2a787d8db7b3 100644
--- a/src/chrome/content/rules/companic.nl.xml
+++ b/src/chrome/content/rules/companic.nl.xml
@@ -7,7 +7,7 @@
 		- .companic.nl
 
 -->
-<ruleset name="Companic.nl" default_off="missing certificate chain">
+<ruleset name="Companic.nl" default_off="cert-chain">
 
 	<target host="companic.nl" />
 	<target host="www.companic.nl" />
diff --git a/src/chrome/content/rules/companieshouse.gi.xml b/src/chrome/content/rules/companieshouse.gi.xml
index f738e57b8fe1..ddb0edcf092f 100644
--- a/src/chrome/content/rules/companieshouse.gi.xml
+++ b/src/chrome/content/rules/companieshouse.gi.xml
@@ -7,7 +7,7 @@
 		- companieshouse.gi
 
 -->
-<ruleset name="Companies House.gi" default_off="missing certificate chain">
+<ruleset name="Companies House.gi" default_off="cert-chain">
 
 	<target host="www.companieshouse.gi" />
 
diff --git a/src/chrome/content/rules/elrippoisland.net.xml b/src/chrome/content/rules/elrippoisland.net.xml
index eddd723008df..d67a13230c16 100644
--- a/src/chrome/content/rules/elrippoisland.net.xml
+++ b/src/chrome/content/rules/elrippoisland.net.xml
@@ -2,7 +2,7 @@
 	NB: Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="elrippoisland.net" default_off="missing certificate chain">
+<ruleset name="elrippoisland.net" default_off="cert-chain">
 
 	<target host="elrippoisland.net" />
 	<target host="www.elrippoisland.net" />
diff --git a/src/chrome/content/rules/gardners.com.xml b/src/chrome/content/rules/gardners.com.xml
index d23bfbac4280..174d9ff1c69c 100644
--- a/src/chrome/content/rules/gardners.com.xml
+++ b/src/chrome/content/rules/gardners.com.xml
@@ -6,7 +6,7 @@
 	ᶜ Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="gardners.com" default_off="missing certificate chain">
+<ruleset name="gardners.com" default_off="cert-chain">
 
 	<target host="jackets.gardners.com" />
 
diff --git a/src/chrome/content/rules/homebid.org.uk.xml b/src/chrome/content/rules/homebid.org.uk.xml
index 41b894a99d98..393b9424f1ef 100644
--- a/src/chrome/content/rules/homebid.org.uk.xml
+++ b/src/chrome/content/rules/homebid.org.uk.xml
@@ -12,7 +12,7 @@
 		- Image from homeconnections.org.uk
 
 -->
-<ruleset name="Homebid.org.uk" default_off="missing certificate chain">
+<ruleset name="Homebid.org.uk" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/ivsezaodnogo.ru.xml b/src/chrome/content/rules/ivsezaodnogo.ru.xml
index 41e8f5fa2e34..a9d51e4a520d 100644
--- a/src/chrome/content/rules/ivsezaodnogo.ru.xml
+++ b/src/chrome/content/rules/ivsezaodnogo.ru.xml
@@ -8,7 +8,7 @@
 		- www.ivsezaodnogo.ru
 
 -->
-<ruleset name="ivsezaodnogo.ru" default_off="missing certificate chain">
+<ruleset name="ivsezaodnogo.ru" default_off="cert-chain">
 
 	<target host="ivsezaodnogo.ru" />
 	<target host="www.ivsezaodnogo.ru" />
diff --git a/src/chrome/content/rules/jaoa.org.xml b/src/chrome/content/rules/jaoa.org.xml
index dd2aafd0f97e..be3309a622b8 100644
--- a/src/chrome/content/rules/jaoa.org.xml
+++ b/src/chrome/content/rules/jaoa.org.xml
@@ -3,7 +3,7 @@
 		sitemaster.jaoa.org
 		
 -->
-<ruleset name="Journal of American Osteopathic Association" default_off="missing certificate chain">
+<ruleset name="Journal of American Osteopathic Association" default_off="cert-chain">
 
 	<target host="jaoa.org" />
 	<target host="www.jaoa.org" />
diff --git a/src/chrome/content/rules/lewes.gov.uk.xml b/src/chrome/content/rules/lewes.gov.uk.xml
index e831273b87d3..d18c9ffa0f95 100644
--- a/src/chrome/content/rules/lewes.gov.uk.xml
+++ b/src/chrome/content/rules/lewes.gov.uk.xml
@@ -18,7 +18,7 @@
 	ᶜ Server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="Lewes.gov.uk (partial)" default_off="missing certificate chain">
+<ruleset name="Lewes.gov.uk (partial)" default_off="cert-chain">
 
 	<target host="rbselfservice.lewes.gov.uk" />
 
diff --git a/src/chrome/content/rules/pokerstarspartners.com.xml b/src/chrome/content/rules/pokerstarspartners.com.xml
index d381f9a8bffe..b831f1bfd90e 100644
--- a/src/chrome/content/rules/pokerstarspartners.com.xml
+++ b/src/chrome/content/rules/pokerstarspartners.com.xml
@@ -9,7 +9,7 @@
 	ᶜ See https://owasp.org/index.php/SecureFlag
 
 -->
-<ruleset name="PokerStars Partners.com" default_off="missing certificate chain">
+<ruleset name="PokerStars Partners.com" default_off="cert-chain">
 
 	<target host="pokerstarspartners.com" />
 	<target host="www.pokerstarspartners.com" />
diff --git a/src/chrome/content/rules/rootless.org.xml b/src/chrome/content/rules/rootless.org.xml
index 6800563fabbd..1ce27deee54b 100644
--- a/src/chrome/content/rules/rootless.org.xml
+++ b/src/chrome/content/rules/rootless.org.xml
@@ -10,7 +10,7 @@
 	NB: server sends no certificate chain, see https://whatsmychaincert.com
 
 -->
-<ruleset name="rootless.org (partial)" default_off="missing certificate chain">
+<ruleset name="rootless.org (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/rutland.gov.uk.xml b/src/chrome/content/rules/rutland.gov.uk.xml
index 398fbfbff045..48e2e1e4da1e 100644
--- a/src/chrome/content/rules/rutland.gov.uk.xml
+++ b/src/chrome/content/rules/rutland.gov.uk.xml
@@ -26,7 +26,7 @@
 		- webpayments.rutland.gov.uk
 
 -->
-<ruleset name="Rutland.gov.uk (partial)" default_off="missing certificate chain">
+<ruleset name="Rutland.gov.uk (partial)" default_off="cert-chain">
 
 	<target host="webpayments.rutland.gov.uk" />
 
diff --git a/src/chrome/content/rules/sitejam.com.xml b/src/chrome/content/rules/sitejam.com.xml
index 24dfd71116ab..ac4509fa738a 100644
--- a/src/chrome/content/rules/sitejam.com.xml
+++ b/src/chrome/content/rules/sitejam.com.xml
@@ -9,7 +9,7 @@
 	ᵐ Mismatched
 
 -->
-<ruleset name="sitejam.com" default_off="missing certificate chain">
+<ruleset name="sitejam.com" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/tldrio.xml b/src/chrome/content/rules/tldrio.xml
index 6f2de0b50c02..f7c567cff819 100644
--- a/src/chrome/content/rules/tldrio.xml
+++ b/src/chrome/content/rules/tldrio.xml
@@ -15,7 +15,7 @@
 		- www.api.tldr.io
 
 -->
-<ruleset name="tldr.io (partial)" default_off="missing certificate chain">
+<ruleset name="tldr.io (partial)" default_off="cert-chain">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/transperfect.com-problematic.xml b/src/chrome/content/rules/transperfect.com-problematic.xml
index de5370c5c1b7..6cb7011b3ef1 100644
--- a/src/chrome/content/rules/transperfect.com-problematic.xml
+++ b/src/chrome/content/rules/transperfect.com-problematic.xml
@@ -5,7 +5,7 @@
 	NB: see https://www.paulirish.com/2010/the-protocol-relative-url/
 
 -->
-<ruleset name="TransPerfect.com (missing certificate chain)" default_off="missing certificate chain">
+<ruleset name="TransPerfect.com (missing certificate chain)" default_off="cert-chain">
 
 	<target host="transperfect.com" />
 	<target host="www.transperfect.com" />
diff --git a/src/chrome/content/rules/voipuserportal.co.uk.xml b/src/chrome/content/rules/voipuserportal.co.uk.xml
index 485d9a2dab96..7e274680621d 100644
--- a/src/chrome/content/rules/voipuserportal.co.uk.xml
+++ b/src/chrome/content/rules/voipuserportal.co.uk.xml
@@ -13,7 +13,7 @@
 	ᶜ See https://owasp.org/index.php/SecureFlag
 
 -->
-<ruleset name="VOIP user portal.co.uk" default_off="missing certificate chain">
+<ruleset name="VOIP user portal.co.uk" default_off="cert-chain">
 
 	<target host="voipuserportal.co.uk" />
 	<target host="www.voipuserportal.co.uk" />
diff --git a/src/chrome/content/rules/xtremegunsandammo.com.xml b/src/chrome/content/rules/xtremegunsandammo.com.xml
index 11fd238f3073..f4f3747bd6ab 100644
--- a/src/chrome/content/rules/xtremegunsandammo.com.xml
+++ b/src/chrome/content/rules/xtremegunsandammo.com.xml
@@ -10,7 +10,7 @@
 	ᶜ See https://owasp.org/index.php/SecureFlag
 
 -->
-<ruleset name="Xtreme Guns and Ammo.com" default_off="missing certificate chain">
+<ruleset name="Xtreme Guns and Ammo.com" default_off="cert-chain">
 
 	<target host="xtremegunsandammo.com" />
 	<target host="www.xtremegunsandammo.com" />