Option to exclude expired certificates

[AGWA]

Allow user to specify the date we use for checking the expiration, so if they care about certs that were valid at any point in the last 30 days, they can specify that.