Remove old methods for checking certificate state using
subprocess and openssl; replace with new method using
cryptography.x509.