Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
With SHA-1 deprecation, we need a few certificates using algorithms in the default support list. Most tests still use SHA-1 though. The generation process for the new certificates is recorded in the makefile.