Remove stray underscore leftover. Might fix #3153...
Add tests to exercise invalid/expired cert code, check for context fetch errors.

cleanupIdentities takes a proper failure callback now.
Merge pull request #3168 from mozilla/issue_3153_invalid_certs

Issue 3153 invalid certs