empty set doesnt report as tlserror, report tls cert errormessage