import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as cloudflare from "@pulumi/cloudflare";
 *
 * const exampleCustomSsl = cloudflare.getCustomSsl({
 *     zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
 *     customCertificateId: "023e105f4ecef8ad9ca31a8372d0c353",
 * });
 * ```
 */
export declare function getCustomSsl(args: GetCustomSslArgs, opts?: pulumi.InvokeOptions): Promise<GetCustomSslResult>;
/**
 * A collection of arguments for invoking getCustomSsl.
 */
export interface GetCustomSslArgs {
    /**
     * Identifier.
     */
    customCertificateId?: string;
    filter?: inputs.GetCustomSslFilter;
    /**
     * Identifier.
     */
    zoneId: string;
}
/**
 * A collection of values returned by getCustomSsl.
 */
export interface GetCustomSslResult {
    /**
     * A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it.
     * Available values: "ubiquitous", "optimal", "force".
     */
    readonly bundleMethod: string;
    /**
     * Identifier.
     */
    readonly customCertificateId?: string;
    /**
     * When the certificate from the authority expires.
     */
    readonly expiresOn: string;
    readonly filter?: outputs.GetCustomSslFilter;
    /**
     * Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
     */
    readonly geoRestrictions: outputs.GetCustomSslGeoRestrictions;
    readonly hosts: string[];
    /**
     * Identifier.
     */
    readonly id: string;
    /**
     * The certificate authority that issued the certificate.
     */
    readonly issuer: string;
    readonly keylessServer: outputs.GetCustomSslKeylessServer;
    /**
     * When the certificate was last modified.
     */
    readonly modifiedOn: string;
    /**
     * The policy restrictions returned by the API. This field is returned in responses
     * when a policy has been set. The API accepts the "policy" field in requests but
     * returns this field as "policyRestrictions" in responses.
     */
    readonly policyRestrictions: string;
    readonly priority: number;
    readonly signature: string;
    readonly status: string;
    readonly uploadedOn: string;
    /**
     * Identifier.
     */
    readonly zoneId: string;
}
/**
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as cloudflare from "@pulumi/cloudflare";
 *
 * const exampleCustomSsl = cloudflare.getCustomSsl({
 *     zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
 *     customCertificateId: "023e105f4ecef8ad9ca31a8372d0c353",
 * });
 * ```
 */
export declare function getCustomSslOutput(args: GetCustomSslOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetCustomSslResult>;
/**
 * A collection of arguments for invoking getCustomSsl.
 */
export interface GetCustomSslOutputArgs {
    /**
     * Identifier.
     */
    customCertificateId?: pulumi.Input<string>;
    filter?: pulumi.Input<inputs.GetCustomSslFilterArgs>;
    /**
     * Identifier.
     */
    zoneId: pulumi.Input<string>;
}