Add rake task: certificates:update_expirations