Feature: libs: Log if a TLS certificate is close to expiration.

We can only check a cert once the gnutls handshake has finished.
However once that happens, the server and client can both grab their own
certificate and see if it's within a month of expiration. If so, log
that as a warning.