Merge pull request #2175 from reaperhulk/csr-better-err-msg

handle RSA key too small and consume errors on CSR signature failure