internalAddGeneratedFile( ' �b 2google/cloud/security/privateca/v1/resources.proto"google.cloud.security.privateca.v1google/api/resource.protogoogle/protobuf/duration.protogoogle/protobuf/timestamp.protogoogle/type/expr.proto"� CertificateAuthority name

( B�AS type
(2=.google.cloud.security.privateca.v1.CertificateAuthority.TypeB�A�AM config
(25.google.cloud.security.privateca.v1.CertificateConfigB�A�A3 lifetime
(2.google.protobuf.DurationB�A�Aa key_spec
(2G.google.cloud.security.privateca.v1.CertificateAuthority.KeyVersionSpecB�A�AV subordinate_config
(25.google.cloud.security.privateca.v1.SubordinateConfigB�A
B tier
(2/.google.cloud.security.privateca.v1.CaPool.TierB�AR state
(2>.google.cloud.security.privateca.v1.CertificateAuthority.StateB�A pem_ca_certificates ( B�Ad ca_certificate_descriptions (2:.google.cloud.security.privateca.v1.CertificateDescriptionB�A gcs_bucket
( B�A] access_urls
(2C.google.cloud.security.privateca.v1.CertificateAuthority.AccessUrlsB�A4 create_time
(2.google.protobuf.TimestampB�A4 update_time
(2.google.protobuf.TimestampB�A4 delete_time
(2.google.protobuf.TimestampB�A4 expire_time
(2.google.protobuf.TimestampB�AY labels (2D.google.cloud.security.privateca.v1.CertificateAuthority.LabelsEntryB�A
H AccessUrls! ca_certificate_access_url

(  crl_access_urls ( �
KeyVersionSpec cloud_kms_key_version

( H_ algorithm
(2J.google.cloud.security.privateca.v1.CertificateAuthority.SignHashAlgorithmHB KeyVersion- LabelsEntry key

(  value
( :8
"> Type TYPE_UNSPECIFIED SELF_SIGNED
 SUBORDINATE"p State STATE_UNSPECIFIED ENABLED
 DISABLED STAGED AWAITING_USER_ACTIVATION DELETED"�
SignHashAlgorithm# SIGN_HASH_ALGORITHM_UNSPECIFIED RSA_PSS_2048_SHA256
 RSA_PSS_3072_SHA256 RSA_PSS_4096_SHA256 RSA_PKCS1_2048_SHA256 RSA_PKCS1_3072_SHA256 RSA_PKCS1_4096_SHA256 EC_P256_SHA256 EC_P384_SHA384:�
�A�
-privateca.googleapis.com/CertificateAuthorityhprojects/{project}/locations/{location}/caPools/{ca_pool}/certificateAuthorities/{certificate_authority}"� CaPool name

( B�AE tier
(2/.google.cloud.security.privateca.v1.CaPool.TierB�A�AW issuance_policy
(29.google.cloud.security.privateca.v1.CaPool.IssuancePolicyB�A
] publishing_options
(2<.google.cloud.security.privateca.v1.CaPool.PublishingOptionsB�A
K labels (26.google.cloud.security.privateca.v1.CaPool.LabelsEntryB�A
K PublishingOptions publish_ca_cert

(B�A
 publish_crl
(B�A
� IssuancePolicyh allowed_key_types
(2H.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyTypeB�A
8 maximum_lifetime
(2.google.protobuf.DurationB�A
l allowed_issuance_modes
(2G.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModesB�A
P baseline_values
(22.google.cloud.security.privateca.v1.X509ParametersB�A
e identity_constraints
(2B.google.cloud.security.privateca.v1.CertificateIdentityConstraintsB�A
h passthrough_extensions
(2C.google.cloud.security.privateca.v1.CertificateExtensionConstraintsB�A
� AllowedKeyTypeb rsa

(2S.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType.RsaKeyTypeHl elliptic_curve
(2R.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType.EcKeyTypeHJ RsaKeyType min_modulus_size

(B�A
 max_modulus_size
(B�A
� EcKeyType�
signature_algorithm

(2g.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType.EcKeyType.EcSignatureAlgorithmB�A
"o EcSignatureAlgorithm& "EC_SIGNATURE_ALGORITHM_UNSPECIFIED ECDSA_P256
 ECDSA_P384 EDDSA_25519B key_type` IssuanceModes% allow_csr_based_issuance

(B�A
( allow_config_based_issuance
(B�A
- LabelsEntry key

(  value
( :8
"8 Tier TIER_UNSPECIFIED ENTERPRISE
 DEVOPS:_�A\\ privateca.googleapis.com/CaPool9projects/{project}/locations/{location}/caPools/{ca_pool}"� CertificateRevocationList name

( B�A sequence_number
(B�As revoked_certificates (2P.google.cloud.security.privateca.v1.CertificateRevocationList.RevokedCertificateB�A pem_crl
( B�A access_url
( B�AW state
(2C.google.cloud.security.privateca.v1.CertificateRevocationList.StateB�A4 create_time
(2.google.protobuf.TimestampB�A4 update_time
(2.google.protobuf.TimestampB�A revision_id
( B�A^ labels (2I.google.cloud.security.privateca.v1.CertificateRevocationList.LabelsEntryB�A
�
RevokedCertificate> certificate

( B)�A& $privateca.googleapis.com/Certificate hex_serial_number
( O revocation_reason
(24.google.cloud.security.privateca.v1.RevocationReason- LabelsEntry key

(  value
( :8
": State STATE_UNSPECIFIED ACTIVE
 SUPERSEDED:�
�A�
2privateca.googleapis.com/CertificateRevocationList�
projects/{project}/locations/{location}/caPools/{ca_pool}/certificateAuthorities/{certificate_authority}/certificateRevocationLists/{certificate_revocation_list}"� Certificate: name

( B,�A�A& $privateca.googleapis.com/Certificate pem_csr
( B�AHL config
(25.google.cloud.security.privateca.v1.CertificateConfigB�AH[ issuer_certificate_authority
( B5�A�A/ -privateca.googleapis.com/CertificateAuthority3 lifetime
(2.google.protobuf.DurationB�A�AR certificate_template
( B4�A�A. ,privateca.googleapis.com/CertificateTemplateQ subject_mode
(26.google.cloud.security.privateca.v1.SubjectRequestModeB�Ab revocation_details
(2A.google.cloud.security.privateca.v1.Certificate.RevocationDetailsB�A pem_certificate
( B�A` certificate_description
(2:.google.cloud.security.privateca.v1.CertificateDescriptionB�A" pem_certificate_chain ( B�A4 create_time
(2.google.protobuf.TimestampB�A4 update_time
(2.google.protobuf.TimestampB�AP labels (2;.google.cloud.security.privateca.v1.Certificate.LabelsEntryB�A
�
RevocationDetailsN revocation_state

(24.google.cloud.security.privateca.v1.RevocationReason3 revocation_time
(2.google.protobuf.Timestamp- LabelsEntry key

(  value
( :8
:�A| $privateca.googleapis.com/CertificateTprojects/{project}/locations/{location}/caPools/{ca_pool}/certificates/{certificate}B certificate_config"� CertificateTemplateB name

( B4�A�A. ,privateca.googleapis.com/CertificateTemplateR predefined_values
(22.google.cloud.security.privateca.v1.X509ParametersB�A
e identity_constraints
(2B.google.cloud.security.privateca.v1.CertificateIdentityConstraintsB�A
h passthrough_extensions
(2C.google.cloud.security.privateca.v1.CertificateExtensionConstraintsB�A
 description
( B�A
4 create_time
(2.google.protobuf.TimestampB�A4 update_time
(2.google.protobuf.TimestampB�AX labels (2C.google.cloud.security.privateca.v1.CertificateTemplate.LabelsEntryB�A
- LabelsEntry key

(  value
( :8
:�
�A�
,privateca.googleapis.com/CertificateTemplateSprojects/{project}/locations/{location}/certificateTemplates/{certificate_template}"� X509ParametersD key_usage

(2,.google.cloud.security.privateca.v1.KeyUsageB�A
U ca_options
(2<.google.cloud.security.privateca.v1.X509Parameters.CaOptionsB�A
E policy_ids (2,.google.cloud.security.privateca.v1.ObjectIdB�A
 aia_ocsp_servers ( B�A
a name_constraints
(2B.google.cloud.security.privateca.v1.X509Parameters.NameConstraintsB�A
U additional_extensions (21.google.cloud.security.privateca.v1.X509ExtensionB�A
s CaOptions is_ca

(B�A
H�

( max_issuer_path_length
(B�A
H
�

B _is_caB _max_issuer_path_length� NameConstraints critical

( permitted_dns_names (  excluded_dns_names (  permitted_ip_ranges (  excluded_ip_ranges ( ! permitted_email_addresses (  excluded_email_addresses (  permitted_uris (  excluded_uris ( "� SubordinateConfigV certificate_authority

( B5�A�A/ -privateca.googleapis.com/CertificateAuthorityHm pem_issuer_chain
(2L.google.cloud.security.privateca.v1.SubordinateConfig.SubordinateConfigChainB�AH7 SubordinateConfigChain pem_certificates
( B�AB subordinate_config"�
PublicKey key

(B�AL format
(27.google.cloud.security.privateca.v1.PublicKey.KeyFormatB�A"0 KeyFormat KEY_FORMAT_UNSPECIFIED PEM
"� CertificateConfig` subject_config

(2C.google.cloud.security.privateca.v1.CertificateConfig.SubjectConfigB�AL x509_config
(22.google.cloud.security.privateca.v1.X509ParametersB�AF public_key
(2-.google.cloud.security.privateca.v1.PublicKeyB�A
�
SubjectConfigA subject

(2+.google.cloud.security.privateca.v1.SubjectB�AR subject_alt_name
(23.google.cloud.security.privateca.v1.SubjectAltNamesB�A
"� CertificateDescriptionj subject_description

(2M.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescriptionL x509_description
(22.google.cloud.security.privateca.v1.X509ParametersA public_key
(2-.google.cloud.security.privateca.v1.PublicKeyX subject_key_id
(2@.google.cloud.security.privateca.v1.CertificateDescription.KeyIdZ authority_key_id
(2@.google.cloud.security.privateca.v1.CertificateDescription.KeyId crl_distribution_points ( $ aia_issuing_certificate_urls ( k cert_fingerprint
(2Q.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint� SubjectDescription< subject

(2+.google.cloud.security.privateca.v1.SubjectM subject_alt_name
(23.google.cloud.security.privateca.v1.SubjectAltNames hex_serial_number
( + lifetime
(2.google.protobuf.Duration3 not_before_time
(2.google.protobuf.Timestamp2 not_after_time
(2.google.protobuf.Timestamp KeyId key_id

( B�A
- CertificateFingerprint sha256_hash

( "\' ObjectId object_id_path
(B�A"�
X509ExtensionD object_id

(2,.google.cloud.security.privateca.v1.ObjectIdB�A critical
(B�A
 value
(B�A"� KeyUsageT base_key_usage

(2<.google.cloud.security.privateca.v1.KeyUsage.KeyUsageOptions` extended_key_usage
(2D.google.cloud.security.privateca.v1.KeyUsage.ExtendedKeyUsageOptionsQ unknown_extended_key_usages (2,.google.cloud.security.privateca.v1.ObjectId�
KeyUsageOptions digital_signature

( content_commitment
( key_encipherment
( data_encipherment
( key_agreement
( cert_sign
( crl_sign
( encipher_only
( decipher_only
(�
ExtendedKeyUsageOptions server_auth

( client_auth
( code_signing
( email_protection
( time_stamping
( ocsp_signing
("�
Subject common_name

(  country_code
(  organization
(  organizational_unit
(  locality
(  province
(  street_address
(  postal_code
( "�
SubjectAltNames dns_names
(  uris (  email_addresses (  ip_addresses ( F custom_sans (21.google.cloud.security.privateca.v1.X509Extension"�
CertificateIdentityConstraints. cel_expression

(2.google.type.ExprB�A
+ allow_subject_passthrough
(B�AH�

5 #allow_subject_alt_names_passthrough
(B�AH
�

B _allow_subject_passthroughB& $_allow_subject_alt_names_passthrough"� CertificateExtensionConstraints| known_extensions
(2].google.cloud.security.privateca.v1.CertificateExtensionConstraints.KnownCertificateExtensionB�A
P additional_extensions (2,.google.cloud.security.privateca.v1.ObjectIdB�A
"�
KnownCertificateExtension+ \'KNOWN_CERTIFICATE_EXTENSION_UNSPECIFIED BASE_KEY_USAGE
 EXTENDED_KEY_USAGE CA_OPTIONS POLICY_IDS AIA_OCSP_SERVERS NAME_CONSTRAINTS*� RevocationReason! REVOCATION_REASON_UNSPECIFIED KEY_COMPROMISE
$ CERTIFICATE_AUTHORITY_COMPROMISE AFFILIATION_CHANGED SUPERSEDED CESSATION_OF_OPERATION CERTIFICATE_HOLD PRIVILEGE_WITHDRAWN" ATTRIBUTE_AUTHORITY_COMPROMISE*] SubjectRequestMode$ SUBJECT_REQUEST_MODE_UNSPECIFIED DEFAULT
 REFLECTED_SPIFFEB�
&com.google.cloud.security.privateca.v1BPrivateCaResourcesProtoP
ZDcloud.google.com/go/security/privateca/apiv1/privatecapb;privatecapb�

�"Google.Cloud.Security.PrivateCA.V1�"Google\\Cloud\\Security\\PrivateCA\\V1�&Google::Cloud::Security::PrivateCA::V1bproto3' , true); static::$is_initialized = true; } }