import * as z from "zod/v3";
import { OpenEnum } from "../../types/enums.js";
import { Result as SafeParseResult } from "../../types/fp.js";
import { SDKValidationError } from "../errors/sdkvalidationerror.js";
import { CertificateParsed } from "./certificateparsed.js";
import { CertificateRevocation } from "./certificaterevocation.js";
import { Ct } from "./ct.js";
import { Validation } from "./validation.js";
import { ZLint } from "./zlint.js";
export declare const ParseStatus: {
    readonly Unknown: "";
    readonly Success: "success";
    readonly Fail: "fail";
    readonly Corrupted: "corrupted";
};
export type ParseStatus = OpenEnum<typeof ParseStatus>;
/**
 * The extent to which the certificate's issuer validated the identity of the entity requesting the certificate. Options include Domain validated (DV), Organization Validated (OV), or Extended Validation (EV).
 */
export declare const ValidationLevel: {
    readonly Unknown: "";
    readonly Dv: "dv";
    readonly Ov: "ov";
    readonly Ev: "ev";
};
/**
 * The extent to which the certificate's issuer validated the identity of the entity requesting the certificate. Options include Domain validated (DV), Organization Validated (OV), or Extended Validation (EV).
 */
export type ValidationLevel = OpenEnum<typeof ValidationLevel>;
export type Certificate = {
    /**
     * When the certificate was added to the Censys dataset.
     */
    addedAt?: string | undefined;
    ct?: Ct | undefined;
    /**
     * Whether the certificate has ever been presented by a service during a scan.
     */
    everSeenInScan?: boolean | undefined;
    /**
     * The MD-5 digest of the entire raw certificate. An identifier used by some systems.
     */
    fingerprintMd5?: string | undefined;
    /**
     * The SHA-1 digest of the entire raw certificate. An identifier used by some systems.
     */
    fingerprintSha1?: string | undefined;
    /**
     * The SHA-256 digest of the entire raw certificate. Its unique identifier, which Censys uses to index certificates records.
     */
    fingerprintSha256?: string | undefined;
    /**
     * When the certificate record was last modified.
     */
    modifiedAt?: string | undefined;
    /**
     * All the names contained in the certificate from various fields.
     */
    names?: Array<string> | null | undefined;
    /**
     * DEPRECATED: Use parent_spki_subject_fingerprint_sha256
     */
    parentSpkiFingerprintSha256?: string | undefined;
    /**
     * The SHA-256 digest of the parent certificate's DER-encoded SubjectPublicKeyInfo concatenated with its Subject.
     */
    parentSpkiSubjectFingerprintSha256?: string | undefined;
    parseStatus?: ParseStatus | undefined;
    parsed?: CertificateParsed | undefined;
    /**
     * Whether the X.509 "poison" extension (OID: 1.3.6.1.4.1.11129.2.4.3) is marked critical, which prohibits the pre-certificate from being trusted.
     */
    precert?: boolean | undefined;
    revocation?: CertificateRevocation | undefined;
    /**
     * Whether the certificate has been revoked before its expiry date by the issuer.
     */
    revoked?: boolean | undefined;
    /**
     * DEPRECATED: Use spki_subject_fingerprint_sha256
     */
    spkiFingerprintSha256?: string | undefined;
    /**
     * The SHA-256 digest of the certificate's DER-encoded SubjectPublicKeyInfo concatenated with its Subject.
     */
    spkiSubjectFingerprintSha256?: string | undefined;
    /**
     * The SHA-256 digest of the unsigned certificate's contents.
     */
    tbsFingerprintSha256?: string | undefined;
    /**
     * The SHA-256 digest of the unsigned certificate with the CT Poison extension removed, if present. This represents the shared contents of a certificate and its corresponding pre-certificate.
     */
    tbsNoCtFingerprintSha256?: string | undefined;
    /**
     * When the certificate record's trust was last checked.
     */
    validatedAt?: string | undefined;
    validation?: Validation | undefined;
    /**
     * The extent to which the certificate's issuer validated the identity of the entity requesting the certificate. Options include Domain validated (DV), Organization Validated (OV), or Extended Validation (EV).
     */
    validationLevel?: ValidationLevel | undefined;
    zlint?: ZLint | undefined;
};
/** @internal */
export declare const ParseStatus$inboundSchema: z.ZodType<ParseStatus, z.ZodTypeDef, unknown>;
/** @internal */
export declare const ValidationLevel$inboundSchema: z.ZodType<ValidationLevel, z.ZodTypeDef, unknown>;
/** @internal */
export declare const Certificate$inboundSchema: z.ZodType<Certificate, z.ZodTypeDef, unknown>;
export declare function certificateFromJSON(jsonString: string): SafeParseResult<Certificate, SDKValidationError>;
//# sourceMappingURL=certificate.d.ts.map