heruAPI
Request errors

CSD errors

The merchant's CSD could not be validated.

link: https://developers.heru.app/errors/csd · status 422

Returned by PUT /merchants/{id}/csd when the files or the password fail a check. The merchant keeps its current CSD, so nothing stops working while you fix it.

422 Unprocessable Content
{
  "code": "CSD_WRONG_PASSWORD",
  "status": 422,
  "message": "The password does not open the private key. Check it with the merchant and upload again.",
  "link": "https://developers.heru.app/errors/csd",
  "fields": [
    { "field": "password", "reason": "does not open private_key" }
  ],
  "request_id": "req_01m4xqfj7we58tkj2xahacdjny"
}
CodeWhat happenedWhat to do
CSD_WRONG_PASSWORDThe password does not open the private key. It is the most common error.Ask the merchant for the password of this .key. The e.firma password is usually different.
CSD_KEY_MISMATCHThe .key does not belong to the .cer.Ask for both files from the same CSD; they are issued together.
CSD_IS_EFIRMAThe files are the e.firma, not the CSD.Ask for the CSD, the certificate the SAT issues for sealing invoices.
CSD_RFC_MISMATCHThe certificate belongs to another RFC.Check that the files are this merchant's, or fix the merchant's RFC.
CSD_EXPIREDThe certificate is expired.The merchant requests a new CSD from the SAT with their e.firma.
CSD_INVALID_CERTIFICATEThe .cer is damaged or is not a certificate.Upload the original .cer file, without converting it.
CSD_INVALID_KEYThe .key is damaged or is not a private key.Upload the original .key file, without converting it.
© 2026 Kuarto Inc. (heru)heru.appQuestions about your integration? Contact your heru account team.