gpgsm: Handle re-issued CA certificates in a better way.