Make expiry checker more robust in case of a circular certificate chain

Use the key cache to get the issuer certificates. Using individual
key list jobs spawned many gpgsm server processes which seem
to have dead-locked each other (eventually the test timed out).

GnuPG-bug-id: 6330