```release-note:bug
pki: Truncate should error on expired certificates
```