Few tests use hardcoded certificates. When these certificates expire, test fails. This bug is filed to update these test certificates to either be generated at run time or updated to have extended expiry date.

Two ways this can be achieved:

- Set system clock to future date and run tests as suggested by Sean C. This would cause krb tests to fail with clock skew error so those should be ignored.
- Other option would be to look for certificates in the test with grep (BEGIN etc.)