Improve error signalling for client certificates.