TLS connection attempt allowed with expired local certificate

Logged when an outbound TLS operation proceeds with an expired local leaf certificate because local expiry checking is enabled and it is within the configured positive allowance. The peer may still reject the certificate. The fields identify the certificate, its expiry time, elapsed time since expiry, and allowance.

Renew the local certificate and set certificate-expiry-grace-period to 0s to block attempts with expired credentials locally while checking is enabled.