Cert::set_expiration_time should mirror KeyAmalgamation::set_expiration_time

Cert::set_expiration_time's interface should mirror KeyAmalgamation::set_expiration_time's interface. In particular, it should return a Result<Vec<Packet>> instead of transforming a Cert.