Ensure proper icon for valid certs with invalid encryption subkey

Usually, such certificates cannot be selected because they are filtered
out. But if the certificate that was used the last time has expired since
then then this certificate is pre-selected.

(cherry picked from commit abeca94505507062485404664499453decc8d4ac)

• GnuPG-bug-id: T6742