As of today, PSM only maps a limited subset of error codes, returned from CERT_VerifyCertNow, into helpful error messages shown to the user. For several errors, it displays a standard message saying "failed for unknown reasons". This makes remote analysis of user problems difficult. PSM should do better. While building a list of all possible error codes and error strings looks like a lot of work, we should implement the simple strategy that is also used when showing error messages for SSL communication failures. At the very least, we should enhance the "failed for unknwon reasons" error message to also display the numerical error code returned from NSS.

I agree completely