This utility checks whether the self-generated root certificate is expired,
or is about to expire. If the expiry will happen less than one week from
now, report this. If the certificate has already expired, also report this
and exit with return value 2.