OpenSSL: Write PKCS#12 extra cert errors into debug log