Fix wrong expiration date on renewed IPA CA certificates
    
    The expiration date was always set to the expiration date of the original
    certificate.
    
    https://fedorahosted.org/freeipa/ticket/4717
    
    Reviewed-By: David Kupka <dkupka@redhat.com>