added critical extension error to error strings
added new test certificates for failure cases