Replace no-san certificate with one that expires in 2044
update README to generate long-lived certs
give it more time to timeout