Show Certificates Before End

Turn `certificates_show_before_end` into `certificate_display_behavior`.

@flowerhack @jrbl

ECOM-11
maybe clearer if you say "status is unavailable/notpassing" etc