import * as pulumi from "@pulumi/pulumi";
/**
 * Use this data source to access data stored in an existing Key Vault Certificate.
 *
 * > **Note:** This data source uses the `GetSecret` function of the Azure API, to get the key of the certificate. Therefore you need secret/get permission
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as azure from "@pulumi/azure";
 *
 * const example = azure.keyvault.getKeyVault({
 *     name: "examplekv",
 *     resourceGroupName: "some-resource-group",
 * });
 * const exampleGetCertificateData = example.then(example => azure.keyvault.getCertificateData({
 *     name: "secret-sauce",
 *     keyVaultId: example.id,
 * }));
 * export const examplePem = exampleGetCertificateData.then(exampleGetCertificateData => exampleGetCertificateData.pem);
 * ```
 */
export declare function getCertificateData(args: GetCertificateDataArgs, opts?: pulumi.InvokeOptions): Promise<GetCertificateDataResult>;
/**
 * A collection of arguments for invoking getCertificateData.
 */
export interface GetCertificateDataArgs {
    /**
     * Specifies the ID of the Key Vault instance where the Secret resides, available on the `azure.keyvault.KeyVault` Data Source / Resource.
     */
    keyVaultId: string;
    /**
     * Specifies the name of the Key Vault Secret.
     */
    name: string;
    /**
     * Specifies the version of the certificate to look up.  (Defaults to latest)
     *
     * > **Note:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
     */
    version?: string;
}
/**
 * A collection of values returned by getCertificateData.
 */
export interface GetCertificateDataResult {
    /**
     * Amount of certificates in the chain in case Key Vault Certificate is a bundle (e.g. has an intermediate certificate).
     */
    readonly certificatesCount: number;
    /**
     * Expiry date of certificate in RFC3339 format.
     */
    readonly expires: string;
    /**
     * The raw Key Vault Certificate data represented as a hexadecimal string.
     */
    readonly hex: string;
    /**
     * The provider-assigned unique ID for this managed resource.
     */
    readonly id: string;
    /**
     * The Key Vault Certificate Key.
     */
    readonly key: string;
    readonly keyVaultId: string;
    readonly name: string;
    /**
     * Not Before date of certificate in RFC3339 format.
     */
    readonly notBefore: string;
    /**
     * The Key Vault Certificate in PEM format.
     */
    readonly pem: string;
    /**
     * A mapping of tags to assign to the resource.
     */
    readonly tags: {
        [key: string]: string;
    };
    readonly version: string;
}
/**
 * Use this data source to access data stored in an existing Key Vault Certificate.
 *
 * > **Note:** This data source uses the `GetSecret` function of the Azure API, to get the key of the certificate. Therefore you need secret/get permission
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as azure from "@pulumi/azure";
 *
 * const example = azure.keyvault.getKeyVault({
 *     name: "examplekv",
 *     resourceGroupName: "some-resource-group",
 * });
 * const exampleGetCertificateData = example.then(example => azure.keyvault.getCertificateData({
 *     name: "secret-sauce",
 *     keyVaultId: example.id,
 * }));
 * export const examplePem = exampleGetCertificateData.then(exampleGetCertificateData => exampleGetCertificateData.pem);
 * ```
 */
export declare function getCertificateDataOutput(args: GetCertificateDataOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetCertificateDataResult>;
/**
 * A collection of arguments for invoking getCertificateData.
 */
export interface GetCertificateDataOutputArgs {
    /**
     * Specifies the ID of the Key Vault instance where the Secret resides, available on the `azure.keyvault.KeyVault` Data Source / Resource.
     */
    keyVaultId: pulumi.Input<string>;
    /**
     * Specifies the name of the Key Vault Secret.
     */
    name: pulumi.Input<string>;
    /**
     * Specifies the version of the certificate to look up.  (Defaults to latest)
     *
     * > **Note:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
     */
    version?: pulumi.Input<string>;
}