Set testdata / example CA expiry to 20 years from issue date

[dswarbrick]

Also add human-readable x509 text format (as requested by @SuperQ in related PR prometheus/prometheus#14696)

Fixes: #3962

[dswarbrick]

Incidentally, the expiry dates of the certs (both CA and server/client) seem to be a bit wild and inconsistent. The original CA had a lifetime of only 5 years, whilst the node{1,2}.pem certs had a 100 year lifetime (!). Usually the CA lifetime would be longer than host/node certs (although 100 years is a bit excessive).

It might be worth regenerating all the test / example certs with more sane lifetimes - and possibly consider bumping the key length to 4096 bits.