Ignore short-lived certificates

[jcjones]

Certs that are shorter than Firefox's short-lived-certificates window won't have revocation checking anyway, so we could consider excluding them from the filter.

[jcjones]

This would have to go into ct-mapreduce since Redis does not have enough information to tell actual lifetime.