Report new cert SHA on failure.
Better semantics for mulhours / muldays

This breaks EditSurfare (which I never used).