Bug 1156302

Description of problem:
After reboot system, it will show "Error loading certificate" when run "subscription-manager refresh" and "subscription-manager list --consumed"

Version-Release number of selected component (if applicable):
katello-headpin-1.4.3.28-1.el6sam_splice.noarch
candlepin-0.9.6.5-1.el6sam.noarch
subscription-manager-1.10.14-7.el7.x86_64
python-rhsm-1.10.12-2.el7.x86_64

How reproducible:
20%

Steps to Reproduce:
Precondition: rhel7 guest installed on Rhev-hypervisor6-6.5-20141017.0.  

1.Register vm to SAM server
[root@dhcp-66-103-114 ~]# subscription-manager register --username=admin --password=admin
The system has been registered with ID: 7a4b641b-e6c6-4108-b4d0-8bda6fad19e9 
2.Auto subscribe on the vm.
[root@dhcp-66-103-114 ~]# subscription-manager subscribe --pool=8ac2019c48f80ce001493feee2023ec9
Successfully attached a subscription for: Red Hat Enterprise Linux for Virtual Datacenters, Standard
[root@dhcp-66-103-114 ~]# subscription-manager list --consumed
+-------------------------------------------+
   Consumed Subscriptions
+-------------------------------------------+
Subscription Name: Red Hat Enterprise Linux for Virtual Datacenters, Standard
Provides:          Oracle Java (for RHEL Server)
                   Red Hat Developer Toolset (for RHEL Server)
                   Red Hat Software Collections Beta (for RHEL Server)
                   Red Hat Enterprise Linux Server
                   Red Hat Beta
                   Red Hat Software Collections (for RHEL Server)
SKU:               RH00050
Contract:          
Account:           
Serial:            3824853241218552091
Pool ID:           8ac2019c48f80ce001493feee2023ec9
Active:            True
Quantity Used:     1
Service Level:     Standard
Service Type:      L1-L3
Status Details:    
Subscription Type: Stackable
Starts:            12/31/2013
Ends:              12/30/2014
System Type:       Virtual

3. Make sure the time in the vm is the same as sam server
SAM Server:
[root@samserv ~]# date
Fri Oct 24 02:40:18 EDT 2014
VM:
[root@dhcp-66-103-114 ~]# date
Fri Oct 24 02:41:39 EDT 2014

4.Stop the vm , then start the vm on the rhevm web UI.

5.After vm has been start, refresh the subscription.
[root@dhcp-66-103-114 ~]# subscription-manager refresh
Error loading certificate
[root@dhcp-66-103-114 ~]# subscription-manager identity
system identity: 7a4b641b-e6c6-4108-b4d0-8bda6fad19e9
name: dhcp-66-103-114
org name: ACME_Corporation
org ID: ACME_Corporation

6. Check the virt-who log under the /var/log/rhsm/rhsm.log

Actual results:
It show some error log as the following.please see the detail in the attachment.
2014-10-23 23:20:55,068 [ERROR] subscription-manager @managercli.py:156 - Unable to perform refresh due to the following exception: Error loading certificate
2014-10-23 23:20:55,068 [ERROR] subscription-manager @managercli.py:157 - Error loading certificate
Traceback (most recent call last):
  File "/usr/share/rhsm/subscription_manager/managercli.py", line 541, in _do_command
    self.certlib.update()
  File "/usr/share/rhsm/subscription_manager/certlib.py", line 69, in update
    return self._do_update()
  File "/usr/share/rhsm/subscription_manager/certlib.py", line 92, in _do_update
    return action.perform(lock=self.lock)
  File "/usr/share/rhsm/subscription_manager/certlib.py", line 233, in perform
    local = self._get_local_serials(report)
  File "/usr/share/rhsm/subscription_manager/certlib.py", line 296, in _get_local_serials
    for valid in self.entdir.list():
  File "/usr/share/rhsm/subscription_manager/certdirectory.py", line 119, in list
    listing.append(create_from_file(path))
  File "/usr/lib64/python2.7/site-packages/rhsm/certificate.py", line 59, in create_from_file
    return _CertFactory().create_from_file(path)
  File "/usr/lib64/python2.7/site-packages/rhsm/certificate2.py", line 66, in create_from_file
    return self._read_x509(_certificate.load(path), path, pem)
  File "/usr/lib64/python2.7/site-packages/rhsm/certificate2.py", line 78, in _read_x509
    raise CertificateException("Error loading certificate")
CertificateException: Error loading certificate


Expected results:
It should success to refresh and list consumed subscriptions after restart vm.

Additional info:
It still can list the available subscriptions after occur this problem on the vm.