[lib] better handling for cert generation errors