Re-add default NotBefore duration in PKI (#5482)
Re-add default NotBefore duration in PKI (#5482)

Fixes #5481
rnaveiras/vault,joelthompson/vault,hashicorp/vault,rnaveiras/vault,quixoten/vault,hartsock/vault,hashicorp/vault,kingland/vault,hartsock/vault,rnaveiras/vault,hartsock/vault,quixoten/vault,quixoten/vault,hartsock/vault,kingland/vault,kingland/vault,rnaveiras/vault,rnaveiras/vault,joelthompson/vault,quixoten/vault,joelthompson/vault,hashicorp/vault,kingland/vault,hashicorp/vault,hartsock/vault,hashicorp/vault,kingland/vault,joelthompson/vault,hashicorp/vault