cert-scan shouldn't ignore expired certificates if no newer ones are found

[Nowaker]

1. Certificate for example.com expires, and nobody ever renews it
2. Expired certificate is better than nothing, so let's accept it.