Set to sane dev default values.
MT#3929 Set sane expiry values for prod usage.
MT#5199 Store client cert in DB and offer P12 fmt.

For browser imports, you need a PKCS12 format, so offer the cert
in that format for download also.