You can use net helpmsg to decode simple error codes:

net helpmsg NUMBER

But certutil.exe knows more error codes, especially the hexadecimal ones:

certutil /error 0x800710E0

Sources:

• The Old New Thing -The NET HELPMSG command will decode Windows error codes, at least the simple ones
• The Old New Thing - The CertUtil program will decode Windows error codes, and in a variety of formats