Fix DKDM generation by moving the validity period a day inside the certificate validity.