Dependency: cki-lib is now requiring cryptography>=42 due to using "not_valid_after_utc"
cki-lib depends on the new-ish function not_valid_after_utc from this library in cki_lib.certs.update_certificate_metrics.
See also: redhat/centos-stream/tests/kernel/kernel-qe-tools!36 (comment 1796086822)