ovs-pki: Reduce CA certificate validity to 10 years to fix 32-bit OpenSSL.