Also update the certificate generation process and put in our info.  :)

Now use the base system's tzdata, which we update regularly...