west to east, both do not have their peer certificates cached
west has leftsendcert=always with a specific rightca

east has strictcrlpolicy=yes and crlcheckinterval=5s

no crls are cached locally. nic serves out a crl
that is fetched by east during the exchange
