Improved Certificate Validation and Reporting

Correct certificate implementation can be manual and error prone. Customer feedback indicates this is a problem area where we could improve both the validation and the visibility of misconfigurations.
The general request is to perform comprehensive validation where possible the validity (well-formed, in-date, compatible etc) anywhere users can bring their own certificates.
This validation should be accompanied by a user-friendly error message as to whether or not the validation check succeeded and specific failure reason. This error should be returned at the point of adding (or invoking) the certificate along with a clear message in the system event log.