#[non_exhaustive]pub enum Reason {
Show 25 variants
IssuerForm,
Serial,
Validity,
HolderIssuer,
NameForm,
ObjectDigest,
Criticality,
UnknownCritical,
AuditIdentity,
TargetCertificate,
AuthorityKeyIdentifier,
OcspLocation,
DistributionPoint,
RevocationConflict,
HolderAbsent,
HolderCertificate,
HolderName,
HolderUniqueId,
AuthorityName,
AuthorityUniqueId,
AuthorityIsCa,
AuthorityUsage,
EmptyPath,
MissingControls,
ControlDistance,
}Expand description
A semantic refusal, never a substitute for resource or decoding failure.
Variants (Non-exhaustive)§
This enum is marked as non-exhaustive
IssuerForm
Issuer is not V2 with exactly one nonempty directoryName and no other forms.
Serial
Serial is zero, negative, or exceeds the twenty encoded octet limit.
Validity
The inclusive validity interval is reversed.
HolderIssuer
A holder baseCertificateID has an out-of-profile issuer name.
NameForm
RFC5755 §4.2 excludes X.400, EDI party and registered-ID name forms.
ObjectDigest
Optional objectDigestInfo names a forbidden object/type combination.
Criticality
Criticality contradicts the extension’s profile.
UnknownCritical
An unrecognized critical extension cannot be accepted by this profile.
AuditIdentity
Audit identity is outside the one-through-twenty octet range.
TargetCertificate
A forbidden targetCert alternative was written.
AuthorityKeyIdentifier
The issuer key identifier required by the PKIX profile is absent.
OcspLocation
An OCSP access location is not an HTTP URL.
DistributionPoint
CRL distribution points do not have the single fullName/profile form.
RevocationConflict
NoRevAvail contradicts a written OCSP/CRL revocation pointer.
HolderAbsent
Explicitly selected Holder alternative is absent.
HolderCertificate
Supplied certificate’s issuer or serial does not match the base identity.
HolderName
None of the written entity names identifies the supplied certificate.
HolderUniqueId
A present holder issuerUID is absent/different in the supplied PKC.
AuthorityName
AC issuer DN does not identify the supplied authority certificate.
AuthorityUniqueId
AC issuer UID does not agree with the authority’s subject UID.
AuthorityIsCa
An AC authority cannot also be a certificate authority.
AuthorityUsage
Present keyUsage permits neither digitalSignature nor contentCommitment.
EmptyPath
A supplied AA path is empty.
MissingControls
A certificate below the explicitly selected AA CA lacks AAControls.
ControlDistance
AAControls pathLenConstraint is smaller than the actual distance.