Display timestamps in 'getcert list' in local time
When displaying a not-valid-after time in the output of 'getcert list',
display local time by default rather than UTC, so that people don't have
to do the math themselves. Add a --utc option to allow forcing the
older behavior. Setting TZ=UTC will also work.