If you want insight into what is happening at the (D)TLS "layer", then
you should write a (D)TLS MIB to capture that information. That does
not belong in the transport model though, just as the specific SSH
failures do not get documented in the SSHTM MIB.
Think of it this way. If you write a generic (D)TLS MIB that recorded
InvalidClientCertificates and InvalidServercertificates, would these
only be incremented when SNMP was the protocol utilizing the (D)TLS
service, or might they also be incremented when using, say, IPFIX or
Netconf or HTTP? I think these are (D)TLS-specific errors, not
SNMP-TM-specific errors.
