New SSL cert expiry check threshold

It seems like in some cases Google start the cert renewal less than one month before the expiry, this would trigger the SSL expiry check alert which has a threshold of 30 days.

Lower the threshold to 28 days to cover such cases.