cli: Fix CRL renewal.

Load CRL expiration date even when it has not just been renewed.
Also, request a newer CRL before local one expires (7 days by
default).
4 jobs for master in 0 seconds
Status Job ID Name Coverage
  External
passed SlapOS.Eggs.UnitTest-Master.Python2

00:14:00

passed SlapOS.Eggs.UnitTest-Master.Python3

00:07:15

passed SlapOS.Eggs.UnitTest-Master.Python2

00:15:21

passed SlapOS.Eggs.UnitTest-Master.Python3

00:28:08