(maint) Return last serial from SSL inventory

If a cert has been revoked and issued again with same name we should
return the new serial instead of the old revoked one.