fix time format in x509 certificates
The new version of openssl is very picky about how time is formatted:
https://github.com/openssl/openssl/pull/2668
basically, the time fields MUST be in UTCTime. It looks like this:
YYMMDDHHMMSSZ
For dates after 2050, dates much be in general time:
YYYYMMDDHHMMSSZ