Currently, the specification does not indicate the need to check certificates passed in the DtlsTransport constructor. It should probably say something along these lines:
"If the certificates value is non-empty, check that the expires on each value is in the future. If a certificate has expired, throw an InvalidParameter exception; otherwise, store the certificates."
Fix for Issue #372