Return 0 from time_left() for expired certs
This PR updates the ciecplib.x509.time_left
function to return 0
for all expired certs, rather than a (potentially large) negative number. This also updates the print_cert_info
function to print [EXPIRED]
as appropriate.