import * as pulumi from "@pulumi/pulumi";
import { input as inputs, output as outputs } from "../../types";
/**
 * Create a new Certificate in a given Project, Location from a particular CertificateAuthority.
 */
export declare class CertificateAuthorityCertificate extends pulumi.CustomResource {
    /**
     * Get an existing CertificateAuthorityCertificate resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): CertificateAuthorityCertificate;
    /**
     * Returns true if the given object is an instance of CertificateAuthorityCertificate.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is CertificateAuthorityCertificate;
    /**
     * A structured description of the issued X.509 certificate.
     */
    readonly certificateDescription: pulumi.Output<outputs.privateca.v1beta1.CertificateDescriptionResponse>;
    /**
     * Immutable. A description of the certificate and key that does not require X.509 or ASN.1.
     */
    readonly config: pulumi.Output<outputs.privateca.v1beta1.CertificateConfigResponse>;
    /**
     * The time at which this Certificate was created.
     */
    readonly createTime: pulumi.Output<string>;
    /**
     * Optional. Labels with user-defined metadata.
     */
    readonly labels: pulumi.Output<{
        [key: string]: string;
    }>;
    /**
     * Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
     */
    readonly lifetime: pulumi.Output<string>;
    /**
     * The resource path for this Certificate in the format `projects/*&#47;locations/*&#47;certificateAuthorities/*&#47;certificates/*`.
     */
    readonly name: pulumi.Output<string>;
    /**
     * The pem-encoded, signed X.509 certificate.
     */
    readonly pemCertificate: pulumi.Output<string>;
    /**
     * The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
     */
    readonly pemCertificateChain: pulumi.Output<string[]>;
    /**
     * Immutable. A pem-encoded X.509 certificate signing request (CSR).
     */
    readonly pemCsr: pulumi.Output<string>;
    /**
     * Details regarding the revocation of this Certificate. This Certificate is considered revoked if and only if this field is present.
     */
    readonly revocationDetails: pulumi.Output<outputs.privateca.v1beta1.RevocationDetailsResponse>;
    /**
     * The time at which this Certificate was updated.
     */
    readonly updateTime: pulumi.Output<string>;
    /**
     * Create a CertificateAuthorityCertificate resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: CertificateAuthorityCertificateArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * The set of arguments for constructing a CertificateAuthorityCertificate resource.
 */
export interface CertificateAuthorityCertificateArgs {
    readonly certificateAuthoritiesId: pulumi.Input<string>;
    readonly certificatesId: pulumi.Input<string>;
    /**
     * Immutable. A description of the certificate and key that does not require X.509 or ASN.1.
     */
    readonly config?: pulumi.Input<inputs.privateca.v1beta1.CertificateConfig>;
    /**
     * Optional. Labels with user-defined metadata.
     */
    readonly labels?: pulumi.Input<{
        [key: string]: pulumi.Input<string>;
    }>;
    /**
     * Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
     */
    readonly lifetime?: pulumi.Input<string>;
    readonly locationsId: pulumi.Input<string>;
    /**
     * Immutable. A pem-encoded X.509 certificate signing request (CSR).
     */
    readonly pemCsr?: pulumi.Input<string>;
    readonly projectsId: pulumi.Input<string>;
}