Don't print both issuer and subject for a root certificate.

Look at expiry date on authority certificates: flag ones which have expired, warn about ones close to expiry (30 days) and show ones within two years of expiry.

build/check_authorities.pl

@@ -1,5 +1,6 @@
 #!/usr/bin/perl -w
 use File::Temp qw(tempfile);
+use Date::Parse;
 
 while (<>) {
 
@@ -54,7 +55,7 @@
 			}
 			if (/^\s*Subject:\s*(.*)$/) {
 				$subject = $1;
-				print "   Subject: $subject\n";
+				print "   Subject: $subject\n" unless $subject eq $issuer;
 			}
 			if (/RSA Public Key: \((\d+) bit\)/) {
 				$pubSize = $1;
@@ -63,6 +64,19 @@
 					print "      *** PUBLIC KEY TOO SHORT ***\n";
 				}
 			}
+			if (/Not After : (.*)$/) {
+				$notAfter = $1;
+				$days = (str2time($notAfter)-time())/86400.0;
+				if ($days < 0) {
+					print "   *** EXPIRED ***\n";
+				} elsif ($days < 30) {
+					$days = int($days);
+					print "   *** expires in $days days\n";
+				} elsif ($days < (365*2)) {
+					$days = int($days);
+					print "   expires in $days days\n";
+				}
+			}
 		}
 		close SSL;
 		#print "   text lines: $#lines\n";