Add -days parameter to openssl signing commands for clarity. Also add some related troubleshooting steps.