NameMismatch
	// NameConstraintsWithoutSANs is a legacy error and is no longer returned.
	NameConstraintsWithoutSANs
	// UnconstrainedName results when a CA certificate contains permitted
	// name constraints, but leaf certificate contains a name of an
	// unsupported or unconstrained type.
	UnconstrainedName
	// TooManyConstraints results when the number of comparison operations
	// needed to check a certificate exceeds the limit set by

pkg crypto/x509, const NameConstraintsWithoutSANs InvalidReason
pkg crypto/x509, const TooManyConstraints = 8
pkg crypto/x509, const TooManyConstraints InvalidReason
pkg crypto/x509, const UnconstrainedName = 7
pkg crypto/x509, const UnconstrainedName InvalidReason
pkg crypto/x509, func MarshalPKCS1PublicKey(*rsa.PublicKey) []uint8
pkg crypto/x509, func MarshalPKCS8PrivateKey(interface{}) ([]uint8, error)

		{"SystemCertPool", Func, 7},
		{"SystemRootsError", Type, 1},
		{"SystemRootsError.Err", Field, 7},
		{"TooManyConstraints", Const, 10},
		{"TooManyIntermediates", Const, 0},
		{"UnconstrainedName", Const, 10},
		{"UnhandledCriticalExtension", Type, 0},
		{"UnknownAuthorityError", Type, 0},
		{"UnknownAuthorityError.Cert", Field, 8},
		{"UnknownPublicKeyAlgorithm", Const, 0},