iOS presently doesn't expose an API to determine while chain validation fails, so we use a hack by computing the localized version of an error string from Security.framework, and then comparing that with the properties to see if they match.

We should use something less brittle once Apple exposes such an API.