Backport create_certs.py from upstream to generate certs at test time

The certs used for testing expire 1 year after they're generated, which
causes a timebomb for stable releases.

Closes: #911714
Signed-off-by: James McCoy <jamessan@debian.org>