Note expired in the certified column

This improves the column a bit as it would previously
have shown expired keys as "not certified" which might
not have been true.