This makes the documented error returned when the cert is rejected consistent with both self and reality.