This improves the column a bit as it would previously have shown expired keys as "not certified" which might not have been true.
