The time when the identity certificate validity ends,
corresponding to the notAfter field in the
certificate.
If there is no certificate (as indicated by the zero
length string value of the object cpkiIdCertFileName),
the value of this object will be a zero length string.