Add option to warn about certificates expiring soon

I hate not noticing my certs expire until it's too late :)

Modifying a local from inside the callback is not a really clean way to do it, but I'm not sure how to do it better.  The verify_callback proc is called back through openssl, so you can't raise from inside it.