Make expiry checker more robust in case of a circular certificate chain

Use the key cache to get the issuer certificates. Using individual
key list jobs spawned many gpgsm server processes which seem
to have dead-locked each other (eventually the test timed out).

• GnuPG-bug-id: T6330