“PIN must contain a combination of numeric, upper case, lower case, and special characters”

that’s technically not a “PIN”