Ngin better error message

[ginsburgnm]

looking to close #174

This tells users that

• [x] no smartcard detected
• [x] selected card out of range of available slots
• [x] distributed to an older certificate

I'm not sure if generic "reader malfunction" is something I can really grab?