Different modules have different limitations. It is not recommended to do so. Initializing one module can execute multiple cryptographic module computations. This makes programming less complicate. It is not advisable to initialize too many modules.

This is defined in errortable.h
#define Smard_Card_Pin_Is_Locked 0xDB011204

The private key cannot be extracted out.
HiSECURE API does not provide extraction of public or private keys. The method of calling is used instead. Calling this GetKeyObjectHandle0 function to extract the key HANDLE execute the cryptographic module computations. For details on extracting the HANDLE, refer to the Cryptographic Module Operation Guide.

It is unnecessary to verify the PIN code to read certificate or interpret its contents.

You cannot extract the private key no matter what method you are using. You can only get its HANDLE. You need to verify the PIN code in using the private code.

The Interior Ministry Citizen Digital Certificate API provides two kinds of Hash algorithms. They are MD5 and SHA_1. The algorithms are 16(MD5) and 20(SHA_1) bit long after hashing.

No limitations.

Interior Ministry Citizen Digital Certificate uses double key pairs, that is, different key pairs are used for digital signature and encryption and decryption.

The Public Key Handle is used for encryption computation and digital signature authentication. The private key Handle is used for decryption and for generating digital signatures.

The digital signature should be 128 bit long.

Presently, the Interior Ministry provides the RSA Asymmetric Encryption/Decryption computation and four kinds of Symmetric Encryption/Decryption computations, namely DES CBA, DES ECB, 3DES CBC, and 3DES ECB.

The Interior Ministry provides signature use API function. It uses SHA_1 Hash Function computing and then applies signature to the computing results. Therefore, there is no limitation to the length of the digital signature produced by using Interior Ministry’s signature function.

Presently, the Interior Ministry CA provides only the SHA_1 with RSA algorithm.

There are length limitations to the encrypted data using Interior Ministry citizen CA 5.1 standard version.
Length of data using Asymmetric Encryption/Decryption algorithms is below 117byte.
Length of data using Symmetric Encryption/Decryption algorithm is below 20Kbyte.

The length of initialization vector is 8 bit.

The size of each certificate is about 1500 bytes.

The system defines month as 0~11 and not 1~12 while week is defined as 0~6 and the date as 1~31. So while you are using API function to get date and time, you need to add 1 to the number of months and weeks.