Indicates either a borked certificate chain or one that is not rooted in one of the configured trust anchors. It can also indicate revoked certificates.
Alias for cause (with more accurate semantics)