Update certificates that expire on 2021, to prolong their validity, to make tests pass three years ahead.
As we're about to change the chain construction logic, we want to make sure the callback will still be called exactly when it should, and not on the (upcoming) ignored certs in the chain.