Improve regen_certs script

Fix openssl 3.4.0 compatibility which fails on crl.version = 2, and regenerate
the pki for additional ci tests which also use git-tracked x509 certs that fail
to verify when the tests are run a few years into the future, leading to FTBFS
errors.

https://bugs.debian.org/1078635
puppetlabs/puppetserver#2902

Author: jcharaoui