..i jusct checked pathfinder.cc - there are just 11 "wouldfail()"
calls.
It could be useful to prefix text messages with numeric codes, as text
messages are likely to change and numeric codes are not.
Something like
wouldfail("Certificate signed using a disallowed Hash algorithm.");
becomes
wouldfail("001 Certificate signed using a disallowed Hash
algorithm.");
or even use numbers > 50 ( >100?) to avoid collision with openssl
verify codes.