Make generated CA certificates last 1 year