// prevent pathological certificates can consuming excessive amounts of
	// CPU time to verify.
	TooManyConstraints
	// CANotAuthorizedForExtKeyUsage results when an intermediate or root
	// certificate does not permit a requested extended key usage.
	CANotAuthorizedForExtKeyUsage
)

// CertificateInvalidError results when an odd error occurs. Users of this
// library probably want to handle all these errors uniformly.

pkg bufio, method (*Writer) Size() int
pkg crypto/tls, const ECDSAWithSHA1 = 515
pkg crypto/tls, const ECDSAWithSHA1 SignatureScheme
pkg crypto/x509, const CANotAuthorizedForExtKeyUsage = 9
pkg crypto/x509, const CANotAuthorizedForExtKeyUsage InvalidReason
pkg crypto/x509, const ExtKeyUsageMicrosoftCommercialCodeSigning = 12
pkg crypto/x509, const ExtKeyUsageMicrosoftCommercialCodeSigning ExtKeyUsage

		{"(SystemRootsError).Error", Method, 1},
		{"(SystemRootsError).Unwrap", Method, 16},
		{"(UnhandledCriticalExtension).Error", Method, 0},
		{"(UnknownAuthorityError).Error", Method, 0},
		{"CANotAuthorizedForExtKeyUsage", Const, 10},
		{"CANotAuthorizedForThisName", Const, 0},
		{"CertPool", Type, 0},
		{"Certificate", Type, 0},
		{"Certificate.AuthorityKeyId", Field, 0},