https://fedorahosted.org/pki/ticket/2534 Automatic recovery of
encryption cert - CA and TPS tokendb shows different certificate status
This patch fixes the reported issue so now the auto-recovered
certificate will reflect the actual status of the certificate. Also,
since the externalReg tracks its own recovered certificate status, it is
consolidated with the certificate status tracking mechanism added in
this patch so that they can be uniformly managed.
thanks,
Christina