On my test foreman box, I build a lot of test hosts. Since I use UUIDs, a new cert is generated every time. This means I have about 90 revoked certs and about 10 valid ones, making the certificates page (More->Smart Proxies->Certificates) very hard to parse.

I think by default we should only show valid certificates to the user, and display pending/revoked certs if asked for by the state filter.

A one-line patch to achieve this is attached. Existing tests pass with it, not sure if we need new ones.