MTLS service error codes
    The 
BlackBerry AtHoc
 MTLS service returns error codes in the form of a JSON file in the following format:
        { "errors" : [ { "code" : "<error-code-1>", "field" : "<field-name>", "message" : <error-message>" }, { "code" : "<error-code-2>", "field" : "<field-name>", "message" : "<error-message>" } ] }
| Error code | Handler | Error message | 
|---|---|---|
| HTTP 403 | IIS | The user certificate is invalid or unable to contact the Certificate Authority (CA.) | 
| HTTP 401 | IIS | The user certificate is expired or blacklisted. | 
| HTTP 500 | IIS | Other (internal server error.) | 
| 1020 | Mobile MTLS Token Service | The request contains an invalid RedirectUri. The parameter exists in the query string and is not an empty value. | 
| 1030 | Mobile MTLS Token Service | The request contains an invalid organization code. | 
| 2010 | Mobile MTLS Token Service | MTLS authentication is not configured for the organization (based on the organization code and Client ID. | 
| 2020 | Mobile MTLS Token Service | The primary regex (CAC/PIV) is not defined for the organization. | 
| 2030 | Mobile MTLS Token Service | The mapping ID cannot be extracted from the certificate. The regex is invalid or the mapping ID is empty. | 
| 3010 | Mobile MTLS Token Service | The user could not be found in  BlackBerry AtHoc. The mapping ID is not set for the user. | 
| 3020 | Mobile MTLS Token Service | The user is disabled or deleted in  BlackBerry AtHoc. |