(PUP-3031) Move certification expiration check up

The http handler code contains a check to see if the expiration
date of the client certificate is within a certain window, so
that we can log a warning message if it will expire soon.

However, the mechanisms for handling this kind of check can
really vary depending on what web server you're running in, so
it doesn't make sense for this check to occur in a code path
that is common to all of the different web servers.

This commit simply moves the logic up into the code for
the individual web servers so that they will have the
ability to adjust the behavior according to their own
needs.
Sorry, you made the update before I could comment on the next aspect of this that I noticed. Why use the return to exit the method early? It seems like it would be clearer to just put the `warn_if_near_expiration` in the certificate existing branch of the `if`.