Fix CA vs User cert expiration problem
Our certs expire in five years now. But the problem is that our CA cert is more recent, so it expires before the user certs. Which is bad, need to do something about that before too long.
The APT cert expires in 13 months. I need to make our CA certs last longer, and set the expiration on user certs earlier then the CA cert. And then regen all the certs for users.