update keystore to selfcert w/10-year expiration