This test is identical to x509-pluto-02.

However, the CRL list that east has is signed by an expired CA key.