You can use net helpmsg to decode simple error codes:
net helpmsg NUMBER
But certutil.exe knows more error codes, especially the hexadecimal ones:
certutil /error 0x800710E0
Sources: