Add a failing certificate roundtrip test
Fix bug in certificate production where new certs didn't have validity periods; tag 0.0.6