Add dsa-check-cert-expire: Checks if a given cert on disk will expire soon.