pub fn cert_remaining_fraction( cert_path: &Path, now: DateTime<Utc>, ) -> Result<(f64, DateTime<Utc>)>
Returns (remaining_fraction, not_after); < 0.5 means time to renew.
(remaining_fraction, not_after)
< 0.5