Ensure proper icon for valid certs with invalid signing subkey
Usually, such certificates cannot be selected because they are filtered
out. But if the certificate that was used the last time has expired since
then then this certificate is pre-selected.
(cherry picked from commit 58de2eea61cadd39da95d059c3c3438b84bd6120)
- GnuPG-bug-id: T6788