Fixes #5599: Set cert expirations to 20 years by default.

What about leap years????