Generated certs expire after 2 years - need to refresh

[fkleedorfer]

Generated certs, e.g. the node's cert, expire after 2 years (see won.cryptography.service.CertificateService#createBuilderWithBasicInfo)

nginx rejects requests that come with expired client certs, so things stop working.