Update certs to fix failing nightly

[padelsbach]

Also, update generation scripts with more info and checks

Nightly failure signature:

netns via: unshare --user --map-root-user --net
net: ns=net:[4026532328] ipv6-loopback=yes
FAIL tls ./server-tls + ./client-tls-pkcs12: client rc=25

[aidangarske]

Thanks Paul!