cleanup failures in certificate; report some errors via the right alert ...

...mechanism