added backdating to gen_certificates script to deal with old unconfigured nodes that think the date is january 1st 2014