east has a certificate that has expired, west should reject it
