check_certificate: fix can't compare offset-naive and offset-aware datetimes

also revive the test that was accidentally removed in 642a7865 (promise/plugin: adjust simpleran promises, 2026-01-30)