Error catalog

Every error class the toolkit throws and every stable domain/reason code, harvested from the source at boot — 36 classes, 649 codes. Each error extends PkiError: catch once with err instanceof pki.errors.PkiError and switch on err.code.

Error classes

Class	Declared in	Flags
`AcmeError`	`lib/framework-error.js`	withCause
`Asn1Error`	`lib/framework-error.js`	withCause
`AttrCertError`	`lib/framework-error.js`	withCause
`C509Error`	`lib/framework-error.js`	withCause
`CborError`	`lib/framework-error.js`	withCause
`CertificateError`	`lib/framework-error.js`	withCause
`CmpError`	`lib/framework-error.js`	withCause
`CmsError`	`lib/framework-error.js`	withCause
`ConstantsError`	`lib/framework-error.js`
`CrlError`	`lib/framework-error.js`	withCause
`CrmfError`	`lib/framework-error.js`	withCause
`CsrError`	`lib/framework-error.js`	withCause
`CsrattrsError`	`lib/framework-error.js`	withCause
`CtError`	`lib/framework-error.js`	withCause
`EstError`	`lib/framework-error.js`	withCause
`HpkeError`	`lib/framework-error.js`	withCause
`InspectError`	`lib/framework-error.js`	withCause
`JoseError`	`lib/framework-error.js`	withCause
`KeyError`	`lib/framework-error.js`	withCause
`LintError`	`lib/framework-error.js`	withCause
`MerkleError`	`lib/framework-error.js`	withCause
`OcspError`	`lib/framework-error.js`	withCause
`OidError`	`lib/framework-error.js`	withCause
`PathError`	`lib/framework-error.js`	withCause
`PemError`	`lib/framework-error.js`	withCause
`Pkcs12Error`	`lib/framework-error.js`	withCause
`Pkcs8Error`	`lib/framework-error.js`	withCause
`SchemaError`	`lib/framework-error.js`	withCause
`ShbsError`	`lib/framework-error.js`	withCause
`SigstoreError`	`lib/framework-error.js`	withCause
`SmimeError`	`lib/framework-error.js`	withCause
`TransportError`	`lib/framework-error.js`	withCause
`TrustError`	`lib/framework-error.js`	withCause
`TspError`	`lib/framework-error.js`	withCause
`WebCryptoError`	`lib/webcrypto.js`	withCause
`WebauthnError`	`lib/framework-error.js`	withCause

`acme/*`

Code	Thrown from
`acme/bad-certid`	`lib/acme.js`
`acme/bad-certificate-chain`	`lib/acme.js`
`acme/bad-contact`	`lib/acme.js`
`acme/bad-directory`	`lib/acme.js`
`acme/bad-identifier`	`lib/acme.js`
`acme/bad-input`	`lib/acme.js`
`acme/bad-key`	`lib/acme.js`
`acme/bad-order`	`lib/acme.js`
`acme/bad-problem`	`lib/acme.js`
`acme/bad-redirect`	`lib/acme.js`
`acme/bad-renewal-window`	`lib/acme.js`
`acme/bad-response`	`lib/acme.js`
`acme/bad-retry-after`	`lib/acme.js`
`acme/bad-revocation-reason`	`lib/acme.js`
`acme/bad-status`	`lib/acme.js`
`acme/bad-tlsalpn`	`lib/acme.js`
`acme/bad-token`	`lib/acme.js`
`acme/bad-transition`	`lib/acme.js`
`acme/bad-url`	`lib/acme.js`
`acme/csr-identifier-mismatch`	`lib/acme.js`
`acme/insecure-url`	`lib/acme.js`
`acme/key-reuse`	`lib/acme.js`
`acme/missing-field`	`lib/acme.js`
`acme/no-account`	`lib/acme.js`
`acme/no-account-url`	`lib/acme.js`
`acme/no-nonce`	`lib/acme.js`
`acme/no-order-url`	`lib/acme.js`
`acme/no-trust-anchors`	`lib/acme.js`
`acme/poll-exhausted`	`lib/acme.js`
`acme/resource-unavailable`	`lib/acme.js`
`acme/response-too-large`	`lib/acme.js`
`acme/server-problem`	`lib/acme.js`
`acme/too-many-redirects`	`lib/acme.js`
`acme/unexpected-status`	`lib/acme.js`

`asn1/*`

Code	Thrown from
`asn1/bad-bit-string`	`lib/asn1-der.js`
`asn1/bad-bmp-string`	`lib/asn1-der.js`
`asn1/bad-boolean`	`lib/asn1-der.js`
`asn1/bad-children`	`lib/asn1-der.js`
`asn1/bad-constructed-string`	`lib/asn1-der.js`
`asn1/bad-generalizedtime`	`lib/asn1-der.js`
`asn1/bad-ia5-string`	`lib/asn1-der.js`
`asn1/bad-integer`	`lib/asn1-der.js`
`asn1/bad-length`	`lib/asn1-der.js`
`asn1/bad-null`	`lib/asn1-der.js`
`asn1/bad-printable-string`	`lib/asn1-der.js`
`asn1/bad-tag`	`lib/asn1-der.js`
`asn1/bad-time`	`lib/asn1-der.js`
`asn1/bad-tlv`	`lib/asn1-der.js`
`asn1/bad-universal-string`	`lib/asn1-der.js`
`asn1/bad-utctime`	`lib/asn1-der.js`
`asn1/bad-utf8-string`	`lib/asn1-der.js`
`asn1/bad-visible-string`	`lib/asn1-der.js`
`asn1/constructed-primitive-type`	`lib/asn1-der.js`
`asn1/expected-primitive`	`lib/asn1-der.js`, `lib/schema-pkix.js`
`asn1/expected-string`	`lib/asn1-der.js`
`asn1/expected-time`	`lib/asn1-der.js`
`asn1/indefinite-length`	`lib/asn1-der.js`
`asn1/integer-too-large`	`lib/asn1-der.js`
`asn1/length-too-large`	`lib/asn1-der.js`
`asn1/non-minimal-integer`	`lib/asn1-der.js`
`asn1/non-minimal-length`	`lib/asn1-der.js`
`asn1/non-minimal-tag`	`lib/asn1-der.js`
`asn1/not-buffer`	`lib/asn1-der.js`
`asn1/tag-too-large`	`lib/asn1-der.js`
`asn1/too-deep`	`lib/asn1-der.js`
`asn1/too-large`	`lib/asn1-der.js`
`asn1/too-many-items`	`lib/asn1-der.js`
`asn1/trailing-bytes`	`lib/asn1-der.js`
`asn1/truncated`	`lib/asn1-der.js`
`asn1/unexpected-tag`	`lib/asn1-der.js`

`attrcert/*`

Code	Thrown from
`attrcert/bad-aa-controls`	`lib/schema-attrcert.js`
`attrcert/bad-access-identity`	`lib/schema-attrcert.js`
`attrcert/bad-acinfo`	`lib/schema-attrcert.js`
`attrcert/bad-attributes`	`lib/attrcert-sign.js`, `lib/schema-attrcert.js`
`attrcert/bad-audit-identity`	`lib/schema-attrcert.js`
`attrcert/bad-clearance`	`lib/schema-attrcert.js`
`attrcert/bad-digested-object-type`	`lib/schema-attrcert.js`
`attrcert/bad-entity-name`	`lib/schema-attrcert.js`
`attrcert/bad-general-name`	`lib/schema-attrcert.js`
`attrcert/bad-general-names`	`lib/schema-attrcert.js`
`attrcert/bad-holder`	`lib/schema-attrcert.js`
`attrcert/bad-ietf-attr`	`lib/schema-attrcert.js`
`attrcert/bad-input`	`lib/attrcert-sign.js`
`attrcert/bad-issuer`	`lib/schema-attrcert.js`
`attrcert/bad-issuer-name`	`lib/attrcert-sign.js`, `lib/schema-attrcert.js`
`attrcert/bad-issuer-serial`	`lib/schema-attrcert.js`
`attrcert/bad-no-rev-avail`	`lib/schema-attrcert.js`
`attrcert/bad-object-digest-info`	`lib/schema-attrcert.js`
`attrcert/bad-proxy-info`	`lib/schema-attrcert.js`
`attrcert/bad-role`	`lib/schema-attrcert.js`
`attrcert/bad-serial-number`	`lib/schema-attrcert.js`
`attrcert/bad-signature-algorithm`	`lib/schema-attrcert.js`
`attrcert/bad-svce-auth-info`	`lib/schema-attrcert.js`
`attrcert/bad-targets`	`lib/schema-attrcert.js`
`attrcert/bad-time`	`lib/schema-attrcert.js`
`attrcert/bad-v2form`	`lib/schema-attrcert.js`
`attrcert/bad-validity`	`lib/schema-attrcert.js`
`attrcert/duplicate-attribute`	`lib/attrcert-sign.js`, `lib/schema-attrcert.js`
`attrcert/legacy-v1-not-supported`	`lib/schema-attrcert.js`
`attrcert/not-an-attribute-certificate`	`lib/schema-attrcert.js`

`byte-reader/*`

Code	Thrown from
`byte-reader/truncated`	`lib/byte-reader.js`

`byte-writer/*`

Code	Thrown from
`byte-writer/bad-value`	`lib/byte-writer.js`

`c509/*`

Code	Thrown from
`c509/bad-certificate-type`	`lib/schema-c509.js`
`c509/bad-extensions`	`lib/schema-c509.js`
`c509/bad-input`	`lib/schema-c509.js`
`c509/bad-name`	`lib/schema-c509.js`
`c509/bad-serial`	`lib/schema-c509.js`
`c509/bad-signature`	`lib/schema-c509.js`
`c509/bad-spki`	`lib/schema-c509.js`
`c509/bad-tbs`	`lib/schema-c509.js`
`c509/bad-validity`	`lib/schema-c509.js`
`c509/non-invertible`	`lib/schema-c509.js`
`c509/non-minimal-serial`	`lib/schema-c509.js`
`c509/not-a-certificate`	`lib/schema-c509.js`
`c509/unknown-algorithm`	`lib/schema-c509.js`

`cbor/*`

Code	Thrown from
`cbor/bad-argument`	`lib/cbor-det.js`
`cbor/bad-item`	`lib/cbor-det.js`
`cbor/bad-simple`	`lib/cbor-det.js`
`cbor/bad-tag-content`	`lib/cbor-det.js`
`cbor/bad-time`	`lib/cbor-det.js`
`cbor/bad-utf8`	`lib/cbor-det.js`
`cbor/biguint-too-large`	`lib/cbor-det.js`
`cbor/duplicate-map-key`	`lib/cbor-det.js`
`cbor/indefinite-length`	`lib/cbor-det.js`
`cbor/non-canonical-nan`	`lib/cbor-det.js`
`cbor/non-minimal-argument`	`lib/cbor-det.js`
`cbor/non-minimal-biguint`	`lib/cbor-det.js`
`cbor/non-minimal-float`	`lib/cbor-det.js`
`cbor/not-buffer`	`lib/cbor-det.js`
`cbor/reserved-ai`	`lib/cbor-det.js`
`cbor/reserved-simple`	`lib/cbor-det.js`
`cbor/too-deep`	`lib/cbor-det.js`
`cbor/too-large`	`lib/cbor-det.js`
`cbor/too-many-items`	`lib/cbor-det.js`
`cbor/trailing-bytes`	`lib/cbor-det.js`
`cbor/truncated`	`lib/cbor-det.js`
`cbor/unexpected-break`	`lib/cbor-det.js`
`cbor/unexpected-major`	`lib/cbor-det.js`
`cbor/unexpected-tag`	`lib/cbor-det.js`
`cbor/unsorted-map-keys`	`lib/cbor-det.js`

`cmp/*`

Code	Thrown from
`cmp/bad-body`	`lib/schema-cmp.js`
`cmp/bad-cert-rep`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-cert-response`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-cert-status`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-content-type`	`lib/cmp-build.js`
`cmp/bad-error`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-extra-certs`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-fail-info`	`lib/schema-cmp.js`
`cmp/bad-freetext`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-general-info`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-header`	`lib/schema-cmp.js`
`cmp/bad-info-type-and-value`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-info-value`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-input`	`lib/cmp-build.js`
`cmp/bad-key-rec-rep`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-name`	`lib/cmp-build.js`
`cmp/bad-pkiconf`	`lib/schema-cmp.js`
`cmp/bad-poll-rep`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-poll-req`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-protection`	`lib/schema-cmp.js`
`cmp/bad-response`	`lib/cmp-build.js`
`cmp/bad-rev-rep`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-rev-req`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-status`	`lib/schema-cmp.js`
`cmp/bad-status-info`	`lib/cmp-build.js`, `lib/schema-cmp.js`
`cmp/bad-time`	`lib/schema-cmp.js`
`cmp/bad-url`	`lib/cmp-build.js`
`cmp/bad-version`	`lib/schema-cmp.js`
`cmp/empty-response`	`lib/cmp-build.js`
`cmp/http-error`	`lib/cmp-build.js`
`cmp/no-trust-anchors`	`lib/cmp-build.js`
`cmp/not-a-pki-message`	`lib/schema-cmp.js`
`cmp/protection-alg-mismatch`	`lib/schema-cmp.js`
`cmp/redirect-not-followed`	`lib/cmp-build.js`
`cmp/response-too-large`	`lib/cmp-build.js`
`cmp/unexpected-status`	`lib/cmp-build.js`
`cmp/unsupported-algorithm`	`lib/cmp-build.js`

`cms/*`

Code	Thrown from
`cms/bad-aead-params`	`lib/schema-cms.js`
`cms/bad-algorithm-parameters`	`lib/cms-compress.js`
`cms/bad-auth-attrs`	`lib/schema-cms.js`
`cms/bad-auth-data`	`lib/schema-cms.js`
`cms/bad-auth-enveloped-data`	`lib/schema-cms.js`
`cms/bad-certificates`	`lib/schema-cms.js`
`cms/bad-compressed-data`	`lib/schema-cms.js`
`cms/bad-content-type-attr`	`lib/schema-cms.js`
`cms/bad-countersignature`	`lib/cms-verify.js`, `lib/schema-cms.js`
`cms/bad-crls`	`lib/schema-cms.js`
`cms/bad-digest-algorithms`	`lib/schema-cms.js`
`cms/bad-econtent`	`lib/schema-cms.js`
`cms/bad-encap-content-info`	`lib/schema-cms.js`
`cms/bad-encrypted-content-info`	`lib/schema-cms.js`
`cms/bad-encrypted-data`	`lib/schema-cms.js`
`cms/bad-enveloped-data`	`lib/schema-cms.js`
`cms/bad-input`	`lib/cms-compress.js`, `lib/cms-decrypt.js`, `lib/cms-encrypt.js`, `lib/cms-sign.js`, `lib/cms-verify.js`
`cms/bad-issuer-and-serial`	`lib/schema-cms.js`
`cms/bad-kari`	`lib/schema-cms.js`
`cms/bad-kari-identifier`	`lib/schema-cms.js`
`cms/bad-kek-identifier`	`lib/schema-cms.js`
`cms/bad-kek-length`	`lib/schema-cms.js`
`cms/bad-kekri`	`lib/schema-cms.js`
`cms/bad-kem-ciphertext`	`lib/schema-cms.js`
`cms/bad-kem-recipient-info`	`lib/schema-cms.js`
`cms/bad-key-usage`	`lib/cms-encrypt.js`
`cms/bad-ktri`	`lib/schema-cms.js`
`cms/bad-message-digest-attr`	`lib/schema-cms.js`
`cms/bad-name`	`lib/cms-verify.js`
`cms/bad-ori`	`lib/schema-cms.js`
`cms/bad-originator-certs`	`lib/schema-cms.js`
`cms/bad-originator-crls`	`lib/schema-cms.js`
`cms/bad-originator-identifier`	`lib/schema-cms.js`
`cms/bad-originator-info`	`lib/schema-cms.js`
`cms/bad-originator-public-key`	`lib/schema-cms.js`
`cms/bad-pwri`	`lib/schema-cms.js`
`cms/bad-recipient-encrypted-key`	`lib/schema-cms.js`
`cms/bad-recipient-encrypted-keys`	`lib/schema-cms.js`
`cms/bad-recipient-identifier`	`lib/schema-cms.js`
`cms/bad-recipient-info`	`lib/schema-cms.js`
`cms/bad-recipient-infos`	`lib/schema-cms.js`
`cms/bad-recipient-key-identifier`	`lib/schema-cms.js`
`cms/bad-recipient-version`	`lib/schema-cms.js`
`cms/bad-signature`	`lib/cms-verify.js`
`cms/bad-signed-attrs`	`lib/cms-verify.js`, `lib/schema-cms.js`
`cms/bad-signed-data`	`lib/schema-cms.js`
`cms/bad-signer-identifier`	`lib/schema-cms.js`
`cms/bad-signer-info`	`lib/schema-cms.js`
`cms/bad-signer-infos`	`lib/schema-cms.js`
`cms/bad-signer-version`	`lib/schema-cms.js`
`cms/bad-signing-time-attr`	`lib/schema-cms.js`
`cms/bad-unauth-attrs`	`lib/schema-cms.js`
`cms/bad-unprotected-attrs`	`lib/schema-cms.js`
`cms/bad-unsigned-attrs`	`lib/schema-cms.js`
`cms/bad-version`	`lib/schema-cms.js`
`cms/content-conflict`	`lib/cms-verify.js`
`cms/content-type-mismatch`	`lib/cms-verify.js`, `lib/schema-cms.js`
`cms/decompress-failed`	`lib/cms-compress.js`
`cms/decompress-too-large`	`lib/cms-compress.js`
`cms/decrypt-failed`	`lib/cms-decrypt.js`, `lib/pkcs12-build.js`
`cms/detached-content-required`	`lib/cms-verify.js`
`cms/duplicate-attr`	`lib/schema-cms.js`
`cms/duplicate-content-type`	`lib/schema-cms.js`
`cms/duplicate-message-digest`	`lib/schema-cms.js`
`cms/duplicate-signed-attr`	`lib/schema-cms.js`
`cms/kek-length-mismatch`	`lib/schema-cms.js`
`cms/mac-length-mismatch`	`lib/schema-cms.js`
`cms/message-digest-mismatch`	`lib/cms-verify.js`
`cms/misplaced-attr`	`lib/cms-verify.js`, `lib/schema-cms.js`
`cms/missing-auth-attrs`	`lib/schema-cms.js`
`cms/missing-content-type`	`lib/schema-cms.js`
`cms/missing-digest-algorithm`	`lib/schema-cms.js`
`cms/missing-key-derivation`	`lib/cms-decrypt.js`
`cms/missing-message-digest`	`lib/schema-cms.js`
`cms/missing-signed-attrs`	`lib/schema-cms.js`
`cms/no-encapsulated-content`	`lib/cms-compress.js`
`cms/no-encrypted-content`	`lib/cms-decrypt.js`
`cms/no-matching-recipient`	`lib/cms-decrypt.js`
`cms/no-ski`	`lib/cms-sign.js`
`cms/non-canonical-default`	`lib/schema-cms.js`
`cms/not-a-content-info`	`lib/schema-cms.js`
`cms/signer-cert-not-found`	`lib/cms-verify.js`
`cms/unknown-content-type`	`lib/inspect.js`, `lib/schema-cms.js`
`cms/unsupported-algorithm`	`lib/cms-compress.js`, `lib/cms-decrypt.js`, `lib/cms-encrypt.js`, `lib/cms-verify.js`
`cms/unsupported-content-type`	`lib/cms-compress.js`, `lib/schema-cms.js`
`cms/unsupported-recipient-type`	`lib/cms-decrypt.js`
`cms/verify-error`	`lib/cms-verify.js`

`constants/*`

Code	Thrown from
`constants/bad-scale`	`lib/constants.js`

`crl/*`

Code	Thrown from
`crl/bad-crl-number`	`lib/crl-sign.js`
`crl/bad-extension-value`	`lib/schema-crl.js`
`crl/bad-extensions`	`lib/schema-crl.js`
`crl/bad-idp`	`lib/crl-sign.js`
`crl/bad-input`	`lib/crl-sign.js`
`crl/bad-issuer`	`lib/crl-sign.js`, `lib/schema-crl.js`
`crl/bad-reason-code`	`lib/crl-sign.js`
`crl/bad-revoked-certificates`	`lib/schema-crl.js`
`crl/bad-revoked-entry`	`lib/schema-crl.js`
`crl/bad-signature-algorithm`	`lib/schema-crl.js`
`crl/bad-tbs`	`lib/schema-crl.js`
`crl/bad-version`	`lib/schema-crl.js`
`crl/not-a-crl`	`lib/schema-crl.js`

`crmf/*`

Code	Thrown from
`crmf/bad-cert-req-messages`	`lib/schema-crmf.js`
`crmf/bad-cert-req-msg`	`lib/schema-crmf.js`
`crmf/bad-cert-request`	`lib/schema-crmf.js`
`crmf/bad-cert-template`	`lib/crmf-sign.js`, `lib/schema-crmf.js`
`crmf/bad-control`	`lib/schema-crmf.js`
`crmf/bad-controls`	`lib/crmf-sign.js`, `lib/schema-crmf.js`
`crmf/bad-input`	`lib/crmf-sign.js`
`crmf/bad-name`	`lib/schema-crmf.js`
`crmf/bad-popo`	`lib/crmf-sign.js`, `lib/schema-crmf.js`
`crmf/bad-reg-info`	`lib/crmf-sign.js`, `lib/schema-crmf.js`
`crmf/bad-validity`	`lib/crmf-sign.js`, `lib/schema-crmf.js`
`crmf/bad-version`	`lib/crmf-sign.js`, `lib/schema-crmf.js`

`csr/*`

Code	Thrown from
`csr/bad-attribute-value`	`lib/schema-csr.js`
`csr/bad-attributes`	`lib/schema-csr.js`
`csr/bad-cri`	`lib/schema-csr.js`
`csr/bad-input`	`lib/csr-sign.js`
`csr/not-a-certification-request`	`lib/schema-csr.js`

`csrattrs/*`

Code	Thrown from
`csrattrs/bad-attr-or-oid`	`lib/schema-csrattrs.js`
`csrattrs/bad-extension-req`	`lib/schema-csrattrs.js`
`csrattrs/bad-extension-template`	`lib/schema-csrattrs.js`
`csrattrs/bad-key-type-attr`	`lib/schema-csrattrs.js`
`csrattrs/bad-name-template`	`lib/schema-csrattrs.js`
`csrattrs/bad-spki-template`	`lib/schema-csrattrs.js`
`csrattrs/bad-template`	`lib/schema-csrattrs.js`
`csrattrs/bad-template-attrs`	`lib/schema-csrattrs.js`
`csrattrs/bad-template-version`	`lib/schema-csrattrs.js`
`csrattrs/duplicate-extension-req`	`lib/schema-csrattrs.js`
`csrattrs/duplicate-template`	`lib/schema-csrattrs.js`
`csrattrs/not-csrattrs`	`lib/schema-csrattrs.js`

`ct/*`

Code	Thrown from
`ct/bad-content-type`	`lib/ct.js`
`ct/bad-date`	`lib/ct.js`
`ct/bad-der`	`lib/ct.js`
`ct/bad-entry-type`	`lib/ct.js`
`ct/bad-extensions`	`lib/ct.js`
`ct/bad-input`	`lib/ct.js`
`ct/bad-issuer-key-hash`	`lib/ct.js`
`ct/bad-list`	`lib/ct.js`
`ct/bad-log-list`	`lib/ct.js`
`ct/bad-signature`	`lib/ct.js`
`ct/bad-state`	`lib/ct.js`
`ct/bad-tbs-length`	`lib/ct.js`
`ct/bad-url`	`lib/ct.js`
`ct/duplicate-log`	`lib/ct.js`
`ct/empty-list`	`lib/ct.js`
`ct/empty-response`	`lib/ct.js`
`ct/ext-overrun`	`lib/ct.js`
`ct/http-error`	`lib/ct.js`
`ct/insecure-url`	`lib/ct.js`
`ct/list-trailing-bytes`	`lib/ct.js`
`ct/log-id-mismatch`	`lib/ct.js`
`ct/log-list-untrusted`	`lib/ct.js`
`ct/log-not-found`	`lib/ct.js`
`ct/log-untrusted`	`lib/ct.js`
`ct/no-trust-anchors`	`lib/ct.js`
`ct/response-too-large`	`lib/ct.js`
`ct/sct-empty`	`lib/ct.js`
`ct/sct-too-short`	`lib/ct.js`
`ct/sct-trailing-bytes`	`lib/ct.js`
`ct/sig-overrun`	`lib/ct.js`
`ct/temporal-interval`	`lib/ct.js`
`ct/too-large`	`lib/ct.js`
`ct/too-many-scts`	`lib/ct.js`
`ct/transport-error`	`lib/ct.js`
`ct/truncated`	`lib/ct.js`
`ct/unsupported-algorithm`	`lib/ct.js`
`ct/verify-error`	`lib/ct.js`

`est/*`

Code	Thrown from
`est/ambiguous-issued-cert`	`lib/est.js`
`est/ambiguous-key-type`	`lib/est.js`
`est/auth-required`	`lib/est.js`
`est/bad-base64`	`lib/est.js`
`est/bad-content-type`	`lib/est.js`
`est/bad-input`	`lib/est.js`
`est/bad-key-part`	`lib/est.js`
`est/bad-label`	`lib/est.js`
`est/bad-multipart`	`lib/est.js`
`est/bad-retry-after`	`lib/est.js`
`est/bad-url`	`lib/est.js`
`est/cross-origin-redirect`	`lib/est.js`
`est/empty-body`	`lib/est.js`
`est/expected-encrypted-key`	`lib/est.js`
`est/fullcmc-not-supported`	`lib/est.js`
`est/http-error`	`lib/est.js`
`est/insecure-redirect`	`lib/est.js`
`est/insecure-url`	`lib/est.js`
`est/issued-cert-not-found`	`lib/est.js`
`est/missing-retry-after`	`lib/est.js`
`est/no-trust-anchors`	`lib/est.js`
`est/recipient-mismatch`	`lib/est.js`
`est/reenroll-ambiguous-request`	`lib/est.js`
`est/reenroll-san-mismatch`	`lib/est.js`
`est/reenroll-subject-mismatch`	`lib/est.js`
`est/response-too-large`	`lib/est.js`
`est/tls-unique-too-long`	`lib/est.js`
`est/too-large`	`lib/est.js`
`est/too-many-redirects`	`lib/est.js`
`est/unexpected-certs`	`lib/est.js`
`est/unsupported-operation`	`lib/est.js`

`hpke/*`

Code	Thrown from
`hpke/auth-key-required`	`lib/hpke.js`
`hpke/auth-unsupported`	`lib/hpke.js`
`hpke/bad-key`	`lib/hpke.js`
`hpke/export-length`	`lib/hpke.js`
`hpke/export-only`	`lib/hpke.js`
`hpke/inconsistent-psk`	`lib/hpke.js`
`hpke/message-limit`	`lib/hpke.js`
`hpke/open-failed`	`lib/hpke.js`
`hpke/unknown-mode`	`lib/hpke.js`
`hpke/unknown-suite`	`lib/hpke.js`
`hpke/wrong-role`	`lib/hpke.js`

`inspect/*`

Code	Thrown from
`inspect/bad-certificate`	`lib/inspect.js`
`inspect/bad-cms`	`lib/inspect.js`
`inspect/bad-crl`	`lib/inspect.js`
`inspect/bad-csr`	`lib/inspect.js`
`inspect/bad-input`	`lib/inspect.js`
`inspect/unsupported-format`	`lib/inspect.js`

`jose/*`

Code	Thrown from
`jose/bad-alg`	`lib/jose.js`
`jose/bad-base64url`	`lib/jose.js`
`jose/bad-crit`	`lib/jose.js`
`jose/bad-header`	`lib/jose.js`
`jose/bad-input`	`lib/jose.js`
`jose/bad-jws`	`lib/jose.js`
`jose/bad-key`	`lib/jose.js`
`jose/bad-signature`	`lib/jose.js`
`jose/private-key-material`	`lib/jose.js`
`jose/verify-failed`	`lib/jose.js`

`key/*`

Code	Thrown from
`key/bad-input`	`lib/key.js`
`key/decrypt-failed`	`lib/key.js`
`key/unsupported-algorithm`	`lib/key.js`

`lint/*`

Code	Thrown from
`lint/bad-input`	`lib/lint.js`
`lint/bad-severity`	`lib/lint.js`
`lint/unknown-profile`	`lib/lint.js`

`merkle/*`

Code	Thrown from
`merkle/bad-hash-length`	`lib/merkle.js`
`merkle/bad-input`	`lib/merkle.js`
`merkle/bad-proof`	`lib/merkle.js`
`merkle/bad-proof-length`	`lib/merkle.js`
`merkle/empty-consistency-proof`	`lib/merkle.js`
`merkle/empty-tree`	`lib/merkle.js`
`merkle/index-out-of-range`	`lib/merkle.js`
`merkle/old-size-exceeds-new`	`lib/merkle.js`
`merkle/proof-too-large`	`lib/merkle.js`
`merkle/sizes-equal-nonempty-proof`	`lib/merkle.js`

`ocsp/*`

Code	Thrown from
`ocsp/bad-basic-response`	`lib/schema-ocsp.js`
`ocsp/bad-cert-id`	`lib/schema-ocsp.js`
`ocsp/bad-cert-status`	`lib/schema-ocsp.js`
`ocsp/bad-certs`	`lib/schema-ocsp.js`
`ocsp/bad-der`	`lib/schema-ocsp.js`
`ocsp/bad-input`	`lib/ocsp.js`
`ocsp/bad-nonce`	`lib/schema-ocsp.js`
`ocsp/bad-ocsp-response`	`lib/schema-ocsp.js`
`ocsp/bad-request`	`lib/schema-ocsp.js`
`ocsp/bad-request-list`	`lib/schema-ocsp.js`
`ocsp/bad-requestor-name`	`lib/schema-ocsp.js`
`ocsp/bad-responder-id`	`lib/schema-ocsp.js`
`ocsp/bad-response-bytes`	`lib/schema-ocsp.js`
`ocsp/bad-response-data`	`lib/schema-ocsp.js`
`ocsp/bad-response-status`	`lib/schema-ocsp.js`
`ocsp/bad-responses`	`lib/schema-ocsp.js`
`ocsp/bad-revocation-reason`	`lib/schema-ocsp.js`
`ocsp/bad-revoked-info`	`lib/schema-ocsp.js`
`ocsp/bad-signature`	`lib/schema-ocsp.js`
`ocsp/bad-single-response`	`lib/schema-ocsp.js`
`ocsp/bad-tbs-request`	`lib/schema-ocsp.js`
`ocsp/bad-time`	`lib/schema-ocsp.js`
`ocsp/bad-version`	`lib/schema-ocsp.js`
`ocsp/missing-requestor-name`	`lib/schema-ocsp.js`
`ocsp/not-a-request`	`lib/schema-ocsp.js`
`ocsp/too-many-certs`	`lib/schema-ocsp.js`
`ocsp/unsupported-response-type`	`lib/schema-ocsp.js`

`oid/*`

Code	Thrown from
`oid/bad-arc`	`lib/asn1-der.js`, `lib/oid.js`
`oid/bad-input`	`lib/asn1-der.js`, `lib/oid.js`
`oid/empty`	`lib/asn1-der.js`
`oid/non-minimal`	`lib/asn1-der.js`
`oid/subidentifier-too-large`	`lib/asn1-der.js`
`oid/truncated`	`lib/asn1-der.js`
`oid/unknown-name`	`lib/oid.js`

`path/*`

Code	Thrown from
`path/aia-bad-body`	`lib/path-validate.js`
`path/aia-empty`	`lib/path-validate.js`
`path/aia-status`	`lib/path-validate.js`
`path/aia-too-large`	`lib/path-validate.js`
`path/algorithm-mismatch`	`lib/path-validate.js`
`path/bad-basic-constraints`	`lib/path-validate.js`
`path/bad-extension-value`	`lib/path-validate.js`
`path/bad-idp`	`lib/path-validate.js`
`path/bad-input`	`lib/path-validate.js`
`path/bad-key-usage`	`lib/path-validate.js`
`path/bad-name-constraints`	`lib/path-validate.js`
`path/bad-policy`	`lib/path-validate.js`
`path/bad-signature`	`lib/path-validate.js`
`path/build-limit`	`lib/path-validate.js`
`path/composite-key-usage`	`lib/path-validate.js`
`path/distrusted-after`	`lib/path-validate.js`
`path/eku-not-permitted`	`lib/path-validate.js`
`path/empty-path`	`lib/path-validate.js`
`path/empty-subject-no-critical-san`	`lib/path-validate.js`
`path/expired`	`lib/path-validate.js`
`path/extension-not-critical`	`lib/path-validate.js`
`path/kem-key-usage`	`lib/path-validate.js`
`path/missing-key-cert-sign`	`lib/path-validate.js`
`path/name-chaining`	`lib/path-validate.js`
`path/name-constraint-excluded`	`lib/path-validate.js`
`path/name-constraint-unsupported`	`lib/path-validate.js`
`path/no-path`	`lib/path-validate.js`
`path/not-a-ca`	`lib/path-validate.js`
`path/not-yet-valid`	`lib/path-validate.js`
`path/path-length-exceeded`	`lib/path-validate.js`
`path/policy-required`	`lib/path-validate.js`
`path/policy-tree-cap`	`lib/path-validate.js`
`path/purpose-not-trusted`	`lib/path-validate.js`
`path/revocation-undetermined`	`lib/path-validate.js`
`path/revoked`	`lib/path-validate.js`
`path/unrecognized-critical-extension`	`lib/path-validate.js`
`path/unsupported-algorithm`	`lib/path-validate.js`

`pem/*`

Code	Thrown from
`pem/bad-base64`	`lib/schema-pkix.js`
`pem/bad-input`	`lib/schema-pkix.js`
`pem/bad-label`	`lib/schema-pkix.js`
`pem/explanatory-text`	`lib/schema-pkix.js`
`pem/label-mismatch`	`lib/schema-pkix.js`
`pem/no-block`	`lib/schema-pkix.js`

`pkcs12/*`

Code	Thrown from
`pkcs12/bad-algorithm-parameters`	`lib/pkcs12-build.js`
`pkcs12/bad-attributes`	`lib/schema-pkcs12.js`
`pkcs12/bad-authenticated-safe`	`lib/schema-pkcs12.js`
`pkcs12/bad-authsafe`	`lib/schema-pkcs12.js`
`pkcs12/bad-authsafe-type`	`lib/schema-pkcs12.js`
`pkcs12/bad-bag-type`	`lib/schema-pkcs12.js`
`pkcs12/bad-bag-value`	`lib/schema-pkcs12.js`
`pkcs12/bad-cert-type`	`lib/schema-pkcs12.js`
`pkcs12/bad-crl-type`	`lib/schema-pkcs12.js`
`pkcs12/bad-der`	`lib/pkcs12-build.js`, `lib/schema-pkcs12.js`
`pkcs12/bad-friendly-name`	`lib/schema-pkcs12.js`
`pkcs12/bad-input`	`lib/pkcs12-build.js`
`pkcs12/bad-integrity-mode`	`lib/pkcs12-build.js`, `lib/schema-pkcs12.js`
`pkcs12/bad-local-key-id`	`lib/schema-pkcs12.js`
`pkcs12/bad-mac-data`	`lib/schema-pkcs12.js`
`pkcs12/bad-mac-iterations`	`lib/schema-pkcs12.js`
`pkcs12/bad-safe-contentinfo`	`lib/schema-pkcs12.js`
`pkcs12/bad-safe-contentinfo-type`	`lib/schema-pkcs12.js`
`pkcs12/bad-safe-contents`	`lib/schema-pkcs12.js`
`pkcs12/decrypt-failed`	`lib/pkcs12-build.js`
`pkcs12/iteration-limit`	`lib/pkcs12-build.js`
`pkcs12/mac-mismatch`	`lib/pkcs12-build.js`
`pkcs12/no-integrity`	`lib/pkcs12-build.js`
`pkcs12/no-recipient-key`	`lib/pkcs12-build.js`
`pkcs12/not-a-pfx`	`lib/schema-pkcs12.js`
`pkcs12/signature-invalid`	`lib/pkcs12-build.js`
`pkcs12/too-deep`	`lib/pkcs12-build.js`, `lib/schema-pkcs12.js`
`pkcs12/too-many-elements`	`lib/schema-pkcs12.js`
`pkcs12/unsupported-algorithm`	`lib/pkcs12-build.js`

`pkcs8/*`

Code	Thrown from
`pkcs8/bad-attributes`	`lib/schema-pkcs8.js`
`pkcs8/bad-order`	`lib/schema-pkcs8.js`
`pkcs8/bad-version`	`lib/schema-pkcs8.js`
`pkcs8/not-a-private-key-info`	`lib/schema-pkcs8.js`
`pkcs8/not-an-encrypted-private-key-info`	`lib/schema-pkcs8.js`

`pki/*`

Code	Thrown from
`pki/invalid`	`lib/framework-error.js`

`schema/*`

Code	Thrown from
`schema/unknown-format`	`lib/schema-all.js`

`shbs/*`

Code	Thrown from
`shbs/bad-input`	`lib/shbs.js`
`shbs/bad-public-key`	`lib/shbs.js`
`shbs/bad-signature`	`lib/shbs.js`
`shbs/unsupported-parameter-set`	`lib/shbs.js`

`sigstore/*`

Code	Thrown from
`sigstore/bad-bundle`	`lib/sigstore.js`
`sigstore/bad-bundle-version`	`lib/sigstore.js`
`sigstore/bad-certificate`	`lib/sigstore.js`
`sigstore/bad-checkpoint`	`lib/sigstore.js`
`sigstore/bad-dsse`	`lib/sigstore.js`
`sigstore/bad-inclusion-proof`	`lib/sigstore.js`
`sigstore/bad-input`	`lib/sigstore.js`
`sigstore/bad-key`	`lib/sigstore.js`
`sigstore/bad-statement`	`lib/sigstore.js`
`sigstore/bad-tlog-entry`	`lib/sigstore.js`
`sigstore/chain-incomplete`	`lib/sigstore.js`
`sigstore/chain-invalid`	`lib/sigstore.js`
`sigstore/dsse-verify-failed`	`lib/sigstore.js`
`sigstore/entry-mismatch`	`lib/sigstore.js`
`sigstore/identity-mismatch`	`lib/sigstore.js`
`sigstore/inclusion-proof-mismatch`	`lib/sigstore.js`
`sigstore/predicate-mismatch`	`lib/sigstore.js`
`sigstore/unattested-time`	`lib/sigstore.js`
`sigstore/unsigned-root`	`lib/sigstore.js`
`sigstore/unsupported-content`	`lib/sigstore.js`

`smime/*`

Code	Thrown from
`smime/bad-capabilities`	`lib/schema-smime.js`
`smime/bad-capability`	`lib/schema-smime.js`
`smime/bad-certs`	`lib/schema-smime.js`
`smime/bad-ess-cert-id`	`lib/schema-smime.js`
`smime/bad-ess-cert-id-v2`	`lib/schema-smime.js`
`smime/bad-general-names`	`lib/schema-smime.js`
`smime/bad-header`	`lib/smime.js`
`smime/bad-header-protection`	`lib/smime.js`
`smime/bad-input`	`lib/schema-smime.js`, `lib/smime.js`
`smime/bad-issuer-serial`	`lib/schema-smime.js`
`smime/bad-mime`	`lib/smime.js`
`smime/bad-multipart`	`lib/smime.js`
`smime/bad-policies`	`lib/schema-smime.js`
`smime/bad-policy-information`	`lib/schema-smime.js`
`smime/bad-signing-certificate`	`lib/schema-smime.js`
`smime/bad-signing-certificate-v2`	`lib/schema-smime.js`
`smime/micalg-mismatch`	`lib/smime.js`
`smime/multi-valued-attribute`	`lib/schema-smime.js`
`smime/non-canonical-default`	`lib/schema-smime.js`
`smime/smime-type-mismatch`	`lib/smime.js`
`smime/too-large`	`lib/smime.js`
`smime/unsupported-attribute`	`lib/schema-smime.js`
`smime/unsupported-type`	`lib/smime.js`

`trust/*`

Code	Thrown from
`trust/bad-block`	`lib/trust.js`
`trust/bad-csv`	`lib/trust.js`
`trust/bad-distrust-after`	`lib/trust.js`
`trust/bad-input`	`lib/trust.js`
`trust/bad-octal`	`lib/trust.js`
`trust/bad-trust-value`	`lib/trust.js`
`trust/not-a-certificate`	`lib/trust.js`
`trust/pairing-mismatch`	`lib/trust.js`
`trust/purpose-not-trusted`	`lib/trust.js`

`tsp/*`

Code	Thrown from
`tsp/bad-accuracy`	`lib/schema-tsp.js`
`tsp/bad-der`	`lib/schema-tsp.js`
`tsp/bad-extensions`	`lib/schema-tsp.js`
`tsp/bad-failinfo`	`lib/schema-tsp.js`
`tsp/bad-gentime`	`lib/schema-tsp.js`
`tsp/bad-input`	`lib/tsp-sign.js`
`tsp/bad-key-usage`	`lib/tsp-sign.js`
`tsp/bad-message-imprint`	`lib/schema-tsp.js`
`tsp/bad-ordering`	`lib/schema-tsp.js`
`tsp/bad-request`	`lib/schema-tsp.js`
`tsp/bad-response`	`lib/schema-tsp.js`
`tsp/bad-signature`	`lib/tsp-sign.js`
`tsp/bad-status`	`lib/schema-tsp.js`
`tsp/bad-status-info`	`lib/schema-tsp.js`
`tsp/bad-token`	`lib/schema-tsp.js`
`tsp/bad-tsa`	`lib/schema-tsp.js`
`tsp/bad-tsa-certificate`	`lib/tsp-sign.js`
`tsp/bad-tst-info`	`lib/schema-tsp.js`
`tsp/cert-binding-mismatch`	`lib/tsp-sign.js`
`tsp/detached-token`	`lib/schema-tsp.js`
`tsp/duplicate-extension`	`lib/schema-tsp.js`
`tsp/missing-signing-certificate`	`lib/schema-tsp.js`
`tsp/missing-token`	`lib/schema-tsp.js`, `lib/tsp-sign.js`
`tsp/multi-signer`	`lib/schema-tsp.js`
`tsp/nonce-mismatch`	`lib/tsp-sign.js`
`tsp/not-signed-data`	`lib/schema-tsp.js`
`tsp/policy-mismatch`	`lib/tsp-sign.js`
`tsp/tsa-mismatch`	`lib/tsp-sign.js`
`tsp/unexpected-failinfo`	`lib/schema-tsp.js`, `lib/tsp-sign.js`
`tsp/unexpected-token`	`lib/schema-tsp.js`, `lib/tsp-sign.js`
`tsp/unknown-critical-extension`	`lib/tsp-sign.js`
`tsp/unsupported-algorithm`	`lib/tsp-sign.js`
`tsp/untrusted-tsa`	`lib/tsp-sign.js`
`tsp/wrong-econtent-type`	`lib/schema-tsp.js`

`webauthn/*`

Code	Thrown from
`webauthn/aaguid-mismatch`	`lib/webauthn.js`
`webauthn/bad-att-cert`	`lib/webauthn.js`
`webauthn/bad-att-stmt`	`lib/webauthn.js`
`webauthn/bad-attestation-object`	`lib/webauthn.js`
`webauthn/bad-auth-data`	`lib/webauthn.js`
`webauthn/bad-cose-key`	`lib/webauthn.js`
`webauthn/bad-credential-id`	`lib/webauthn.js`
`webauthn/bad-input`	`lib/webauthn.js`
`webauthn/bad-signature`	`lib/webauthn.js`
`webauthn/bad-tpm`	`lib/webauthn.js`
`webauthn/key-mismatch`	`lib/webauthn.js`
`webauthn/unsupported-algorithm`	`lib/webauthn.js`
`webauthn/unsupported-format`	`lib/webauthn.js`
`webauthn/verify-error`	`lib/webauthn.js`
`webauthn/verify-failed`	`lib/webauthn.js`

`webcrypto/*`

Code	Thrown from
`webcrypto/data`	`lib/webcrypto.js`
`webcrypto/invalid-access`	`lib/webcrypto.js`
`webcrypto/not-supported`	`lib/webcrypto.js`
`webcrypto/operation`	`lib/webcrypto.js`
`webcrypto/syntax`	`lib/webcrypto.js`

`x509/*`

Code	Thrown from
`x509/bad-extensions`	`lib/schema-x509.js`
`x509/bad-input`	`lib/x509-sign.js`
`x509/bad-issuer`	`lib/schema-x509.js`, `lib/x509-sign.js`
`x509/bad-signature-algorithm`	`lib/schema-x509.js`
`x509/bad-tbs`	`lib/schema-x509.js`
`x509/bad-validity`	`lib/schema-x509.js`
`x509/bad-version`	`lib/schema-x509.js`
`x509/not-a-certificate`	`lib/schema-x509.js`

pkijs.com — source-driven documentation, generated from the toolkit's own @primitive comment blocks. Zero runtime dependencies.