Minor improvements around certificate validation in etcd/clustermesh troubleshoot commands

Please refer to the individual commit messages for additional details. Marking for backport to all stable branches given that it is an improvement to a troubleshooting tool.

(Checked a sysdump from three different runs using respectively helm, certgen and cert-manager for certificate generation --- validation completed successfully in all three).