break up sig confirm errors into no sig, crl, and ocsp specific