Auto-generated certificate: expose duration as option, expose as CLI tool, increase default duration to e.g. 100 years