Fixes #5599: Set cert expirations to 20 years by default.