Fix cert verification failure tests

This swaps the verification failure tests over from checking the error
string to checking the error id against the constant exposed by
openssl-sys to make the tests more reliable. This was required by the
string changing in OpenSSL 3.0.8.