Enable optional RP features
Print the certificate expiry, not just the assertion expiry