Reimplement isCertExpired() and getCertExpires() in native R.

This depends on a patched version of the PKI package that provides PKI.get.notAfter() and PKI.get.notBefore() to get validity times from the X509 certificate.
Update test to reflect formatting differences in the subject.