hx509: make hx509_get_error_string(NULL, ...) work