certs: Allow for dealing with multiple things wrong with a cert. Among other things, this also no longer treats an expired certificate as a fatal error. Please review this and check my logic. Comments on the certificate strings welcome. Refs #8226, #9971. Closes #9976.