crl: west sends REVOKED cert
      east sends OK cert

this test has east start without a CRL, so this triggers a fetch with
the crl interval enabled.

The second negotiation attempt from west will fail now that east has the
crl cached.
