Download certificate if expired.
Fetch new certificate and restart EIP.
If authentication fails, restart eip.

This happens when we update the openvpn certificate, in the first
connection attempt.
New certificate if half of its lifetime passed.

It takes for granted that the certificate is valid from the very same
date it's downloaded.
Merge branch 'bug/Certificate-expiration-#5821' into develop