```release-note:improvement
auth/cert: Better return OCSP validation errors during login to the caller.
```