I understand the mechanism, and why it is important.

I don’t understand why the error message from the store was nothing more than an error code, and why the MSKB for that code had absolutely no mention of a failed ssl negotiation as a possible cause.