Default to Letsencrypt's production service

We should not bother users with the staging CA... when we decide to do intensive testing we can easily select it.