New certificate if half of its lifetime passed.

It takes for granted that the certificate is valid from the very same
date it's downloaded.