CKM: Get rid of early expiring certificates