Gave the GetOriginBoundCertificate an asynchronous interface because certificate

net/base/net_error_list.h

Index: net/base/net_error_list.h
===================================================================
--- net/base/net_error_list.h	(revision 94628)
+++ net/base/net_error_list.h	(working copy)
@@ -574,6 +574,18 @@
 // PKCS #12 import failed due to unsupported features.
 NET_ERROR(PKCS12_IMPORT_UNSUPPORTED, -709)
 
+// Origin-bound certificate generation failed.

[wtc, 2011/08/09 00:43:34]

This comment should say:
  Key pair generation failed.

Consider naming this error KEY_GENERATION_FAILED so that it
can also be used for symmetric key generation failure.

+NET_ERROR(KEY_PAIR_GENERATION_FAILED, -710)
+
+// Origin-bound certificate generation failed.
+NET_ERROR(ORIGIN_BOUND_CERT_GENERATION_FAILED, -711)
+
+// Failure to export private key.
+NET_ERROR(PRIVATE_KEY_EXPORT_FAILED, -712)
+
+// Failure to get DER-encoded cert.

[wtc, 2011/08/09 00:43:34]

The comments in this file are the default error messages
for these error codes, so they should be clearly written
and avoid abbreviations.

I wonder if we should name this error code
GET_CERT_BYTES_FAILED, or GET_ENCODED_CERT_FAILED, to avoid
mentioning "DER".

+NET_ERROR(GET_DER_CERT_FAILED, -713)
+
 // DNS error codes.
 
 // DNS resolver received a malformed response.