west has a certificate that has expired, east should reject it
