Adjust expiration time to compute correctly.
If the code intends to update certs, unlink the old cert files.

Also fail if a cert is downloaded but the old file exists, leaving
an old file in place without error/warning is not desired behavior.