Read a TLS certificate expiry check without turning every failure into expired

A certificate monitor that reports “expired” whenever a command fails will eventually send you on the...