31 days.  Not one second longer.
It's HTTP that doesn't like the newlines, not Hawk
Didn't need a certificate here