ca-sign: Tell clients using our CA cert to update CRL every 30 days