Check the expiration date before accepting the dialog

This fixes the issue that the user could create a certificate with an
expiration date outside of the allowed range.

(backported commit libkleo 02ab7c9d7fbadb5effbf88c07658306e92292a03)

• GnuPG-bug-id: T7311