give error if cert has already expired. closes #6484