CreatePfxErrorCode
CreatePfxErrorCode
Caller-correctable failure code from createPfx.
The only parse boundary in creation is the certificate source: it is normalized from untrusted PEM/DER. Private keys are either a WebCrypto CryptoKey (platform errors stay throws) or raw PKCS#8 bytes passed through unvalidated, so there is no distinct invalid_private_key failure to model.
ts
type CreatePfxErrorCode = "invalid_certificate"