[enh] Protocol: add BR_G44.2 - allowing certification replay before expiry (cherry-picked from 1.7 branch)