Discuss cert expiry, no-key princs in PKINIT docs

In pkinit.rst, add "-days" options to the example commands for
creating certificate and briefly discuss the issue of expiration dates
so that the administrator thinks about it.  In troubleshoot.rst, add
an entry for the "certificate has expired" error which results from
PKINIT (when linked with OpenSSL) when a certificate has expired.

https://github.com/krb5/krb5/commit/f3977b6883f0172a2af9006522a1b35546f86749
Author: Greg Hudson <ghudson@mit.edu>
Commit: f3977b6883f0172a2af9006522a1b35546f86749
Branch: master
 doc/admin/pkinit.rst       |   32 ++++++++++++++++++++++++++------
 doc/admin/troubleshoot.rst |   20 ++++++++++++++++++++
 2 files changed, 46 insertions(+), 6 deletions(-)