add audit logging of REMOVE_EXPIRED_CERT