Tweak browserid cert generation to help avoid clock skew problems.