I want to regenerate

localhost.pem

by including the SAN in it (which will make tests pass with newer

bc-fips

). I could align it so that expiry is near Feb 22, 2029.