for expired certificates or assertions, specify which in error messages for simplified debugging
Merge pull request #74 from mozilla/better-error-messages

for expired certificates or assertions, specify which in error messages ...