[Feature Request] Include the thrown exception in CertificateChangeEventArg

**Is your feature request related to a problem? Please describe.**

We want to emit our own telemetry every time a certificate is not successfully used

**Describe the solution you'd like**

We want the exception in the change args.

**Describe alternatives you've considered**

Parsing the emitted logs, however that is messy and we'd rather have it in a structured way via the existing change args.
