type CertificateDetail struct {

	// Specifies whether the certificate is eligible for renewal. At this time, only
	// exported private certificates can be renewed with the RenewCertificate ()
	// command.
	RenewalEligibility RenewalEligibility

	// The algorithm that was used to sign the certificate.
	SignatureAlgorithm *string

	// A list of ARNs for the AWS resources that are using the certificate. A
	// certificate can be used by multiple AWS resources.
	InUseBy []*string

	// The time at which the certificate was revoked. This value exists only when the
	// certificate status is REVOKED.
	RevokedAt *time.Time

	// Value that specifies whether to add the certificate to a transparency log.
	// Certificate transparency makes it possible to detect SSL certificates that have
	// been mistakenly or maliciously issued. A browser might respond to certificate
	// that has not been logged by showing an error message. The logs are
	// cryptographically secure.
	Options *CertificateOptions

	// The date and time at which the certificate was imported. This value exists only
	// when the certificate type is IMPORTED.
	ImportedAt *time.Time

	// The Amazon Resource Name (ARN) of the ACM PCA private certificate authority (CA)
	// that issued the certificate. This has the following format:
	// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
	CertificateAuthorityArn *string

	// The serial number of the certificate.
	Serial *string

	// The name of the certificate authority that issued and signed the certificate.
	Issuer *string

	// The time at which the certificate was requested. This value exists only when the
	// certificate type is AMAZON_ISSUED.
	CreatedAt *time.Time

	// Contains information about the initial validation of each domain name that
	// occurs as a result of the RequestCertificate () request. This field exists only
	// when the certificate type is AMAZON_ISSUED.
	DomainValidationOptions []*DomainValidation

	// The name of the entity that is associated with the public key contained in the
	// certificate.
	Subject *string

	// The reason the certificate was revoked. This value exists only when the
	// certificate status is REVOKED.
	RevocationReason RevocationReason

	// One or more domain names (subject alternative names) included in the
	// certificate. This list contains the domain names that are bound to the public
	// key that is contained in the certificate. The subject alternative names include
	// the canonical domain name (CN) of the certificate and additional domain names
	// that can be used to connect to the website.
	SubjectAlternativeNames []*string

	// The time at which the certificate was issued. This value exists only when the
	// certificate type is AMAZON_ISSUED.
	IssuedAt *time.Time

	// The algorithm that was used to generate the public-private key pair.
	KeyAlgorithm KeyAlgorithm

	// The fully qualified domain name for the certificate, such as www.example.com or
	// example.com.
	DomainName *string

	// A list of Key Usage X.509 v3 extension objects. Each object is a string value
	// that identifies the purpose of the public key contained in the certificate.
	// Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT,
	// NON_REPUDIATION, and more.
	KeyUsages []*KeyUsage

	// The Amazon Resource Name (ARN) of the certificate. For more information about
	// ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces
	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in
	// the AWS General Reference.
	CertificateArn *string

	// The time before which the certificate is not valid.
	NotBefore *time.Time

	// Contains a list of Extended Key Usage X.509 v3 extension objects. Each object
	// specifies a purpose for which the certificate public key can be used and
	// consists of a name and an object identifier (OID).
	ExtendedKeyUsages []*ExtendedKeyUsage

	// The time after which the certificate is not valid.
	NotAfter *time.Time

	// The status of the certificate.
	Status CertificateStatus

	// Contains information about the status of ACM's managed renewal
	// (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html) for the
	// certificate. This field exists only when the certificate type is AMAZON_ISSUED.
	RenewalSummary *RenewalSummary

	// The source of the certificate. For certificates provided by ACM, this value is
	// AMAZON_ISSUED. For certificates that you imported with ImportCertificate (),
	// this value is IMPORTED. ACM does not provide managed renewal
	// (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html) for imported
	// certificates. For more information about the differences between certificates
	// that you import and those that ACM provides, see Importing Certificates
	// (https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in
	// the AWS Certificate Manager User Guide.
	Type CertificateType

	// The reason the certificate request failed. This value exists only when the
	// certificate status is FAILED. For more information, see Certificate Request
	// Failed
	// (https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html#troubleshooting-failed)
	// in the AWS Certificate Manager User Guide.
	FailureReason FailureReason
}

type CertificateOptions struct {

	// You can opt out of certificate transparency logging by specifying the DISABLED
	// option. Opt in by specifying ENABLED.
	CertificateTransparencyLoggingPreference CertificateTransparencyLoggingPreference
}

type CertificateStatus string

const (
	CertificateStatusPending_validation   CertificateStatus = "PENDING_VALIDATION"
	CertificateStatusIssued               CertificateStatus = "ISSUED"
	CertificateStatusInactive             CertificateStatus = "INACTIVE"
	CertificateStatusExpired              CertificateStatus = "EXPIRED"
	CertificateStatusValidation_timed_out CertificateStatus = "VALIDATION_TIMED_OUT"
	CertificateStatusRevoked              CertificateStatus = "REVOKED"
	CertificateStatusFailed               CertificateStatus = "FAILED"
)

type CertificateSummary struct {

	// Amazon Resource Name (ARN) of the certificate. This is of the form:  <p>
	// <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
	// </p> <p>For more information about ARNs, see <a
	// href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon
	// Resource Names (ARNs) and AWS Service Namespaces</a>. </p>
	CertificateArn *string

	// Fully qualified domain name (FQDN), such as www.example.com or example.com, for
	// the certificate.
	DomainName *string
}

type CertificateTransparencyLoggingPreference string

const (
	CertificateTransparencyLoggingPreferenceEnabled  CertificateTransparencyLoggingPreference = "ENABLED"
	CertificateTransparencyLoggingPreferenceDisabled CertificateTransparencyLoggingPreference = "DISABLED"
)

type CertificateType string

const (
	CertificateTypeImported      CertificateType = "IMPORTED"
	CertificateTypeAmazon_issued CertificateType = "AMAZON_ISSUED"
	CertificateTypePrivate       CertificateType = "PRIVATE"
)

type DomainStatus string

const (
	DomainStatusPending_validation DomainStatus = "PENDING_VALIDATION"
	DomainStatusSuccess            DomainStatus = "SUCCESS"
	DomainStatusFailed             DomainStatus = "FAILED"
)

type DomainValidation struct {

	// Contains the CNAME record that you add to your DNS database for domain
	// validation. For more information, see Use DNS to Validate Domain Ownership
	// (https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html).
	// Note: The CNAME information that you need does not include the name of your
	// domain. If you include
 your domain name in the DNS database CNAME record,
	// validation fails.
 For example, if the name is
	// "_a79865eb4cd1a6ab990a45779b4e0b96.yourdomain.com", only
	// "_a79865eb4cd1a6ab990a45779b4e0b96" must be used.
	ResourceRecord *ResourceRecord

	// A fully qualified domain name (FQDN) in the certificate. For example,
	// www.example.com or example.com.
	//
	// This member is required.
	DomainName *string

	// The domain name that ACM used to send domain validation emails.
	ValidationDomain *string

	// Specifies the domain validation method.
	ValidationMethod ValidationMethod

	// A list of email addresses that ACM used to send domain validation emails.
	ValidationEmails []*string

	// The validation status of the domain name. This can be one of the following
	// values:  <ul> <li> <p> <code>PENDING_VALIDATION</code> </p> </li> <li> <p>
	// <code></code>SUCCESS</p> </li> <li> <p> <code></code>FAILED</p> </li> </ul>
	ValidationStatus DomainStatus
}

type DomainValidationOption struct {

	// The domain name that you want ACM to use to send you validation emails. This
	// domain name is the suffix of the email addresses that you want ACM to use. This
	// must be the same as the DomainName value or a superdomain of the DomainName
	// value. For example, if you request a certificate for testing.example.com, you
	// can specify example.com for this value. In that case, ACM sends domain
	// validation emails to the following five addresses:
	//
	//     * admin@example.com
	//
	//
	// * administrator@example.com
	//
	//     * hostmaster@example.com
	//
	//     *
	// postmaster@example.com
	//
	//     * webmaster@example.com
	//
	// This member is required.
	ValidationDomain *string

	// A fully qualified domain name (FQDN) in the certificate request.
	//
	// This member is required.
	DomainName *string
}

type ExtendedKeyUsage struct {

	// The name of an Extended Key Usage value.
	Name ExtendedKeyUsageName

	// An object identifier (OID) for the extension value. OIDs are strings of numbers
	// separated by periods. The following OIDs are defined in RFC 3280 and RFC 5280.
	// <ul> <li> <p> <code>1.3.6.1.5.5.7.3.1 (TLS_WEB_SERVER_AUTHENTICATION)</code>
	// </p> </li> <li> <p> <code>1.3.6.1.5.5.7.3.2
	// (TLS_WEB_CLIENT_AUTHENTICATION)</code> </p> </li> <li> <p>
	// <code>1.3.6.1.5.5.7.3.3 (CODE_SIGNING)</code> </p> </li> <li> <p>
	// <code>1.3.6.1.5.5.7.3.4 (EMAIL_PROTECTION)</code> </p> </li> <li> <p>
	// <code>1.3.6.1.5.5.7.3.8 (TIME_STAMPING)</code> </p> </li> <li> <p>
	// <code>1.3.6.1.5.5.7.3.9 (OCSP_SIGNING)</code> </p> </li> <li> <p>
	// <code>1.3.6.1.5.5.7.3.5 (IPSEC_END_SYSTEM)</code> </p> </li> <li> <p>
	// <code>1.3.6.1.5.5.7.3.6 (IPSEC_TUNNEL)</code> </p> </li> <li> <p>
	// <code>1.3.6.1.5.5.7.3.7 (IPSEC_USER)</code> </p> </li> </ul>
	OID *string
}

type ExtendedKeyUsageName string

const (
	ExtendedKeyUsageNameTls_web_server_authentication ExtendedKeyUsageName = "TLS_WEB_SERVER_AUTHENTICATION"
	ExtendedKeyUsageNameTls_web_client_authentication ExtendedKeyUsageName = "TLS_WEB_CLIENT_AUTHENTICATION"
	ExtendedKeyUsageNameCode_signing                  ExtendedKeyUsageName = "CODE_SIGNING"
	ExtendedKeyUsageNameEmail_protection              ExtendedKeyUsageName = "EMAIL_PROTECTION"
	ExtendedKeyUsageNameTime_stamping                 ExtendedKeyUsageName = "TIME_STAMPING"
	ExtendedKeyUsageNameOcsp_signing                  ExtendedKeyUsageName = "OCSP_SIGNING"
	ExtendedKeyUsageNameIpsec_end_system              ExtendedKeyUsageName = "IPSEC_END_SYSTEM"
	ExtendedKeyUsageNameIpsec_tunnel                  ExtendedKeyUsageName = "IPSEC_TUNNEL"
	ExtendedKeyUsageNameIpsec_user                    ExtendedKeyUsageName = "IPSEC_USER"
	ExtendedKeyUsageNameAny                           ExtendedKeyUsageName = "ANY"
	ExtendedKeyUsageNameNone                          ExtendedKeyUsageName = "NONE"
	ExtendedKeyUsageNameCustom                        ExtendedKeyUsageName = "CUSTOM"
)

type FailureReason string

const (
	FailureReasonNo_available_contacts            FailureReason = "NO_AVAILABLE_CONTACTS"
	FailureReasonAdditional_verification_required FailureReason = "ADDITIONAL_VERIFICATION_REQUIRED"
	FailureReasonDomain_not_allowed               FailureReason = "DOMAIN_NOT_ALLOWED"
	FailureReasonInvalid_public_domain            FailureReason = "INVALID_PUBLIC_DOMAIN"
	FailureReasonDomain_validation_denied         FailureReason = "DOMAIN_VALIDATION_DENIED"
	FailureReasonCaa_error                        FailureReason = "CAA_ERROR"
	FailureReasonPca_limit_exceeded               FailureReason = "PCA_LIMIT_EXCEEDED"
	FailureReasonPca_invalid_arn                  FailureReason = "PCA_INVALID_ARN"
	FailureReasonPca_invalid_state                FailureReason = "PCA_INVALID_STATE"
	FailureReasonPca_request_failed               FailureReason = "PCA_REQUEST_FAILED"
	FailureReasonPca_name_constraints_validation  FailureReason = "PCA_NAME_CONSTRAINTS_VALIDATION"
	FailureReasonPca_resource_not_found           FailureReason = "PCA_RESOURCE_NOT_FOUND"
	FailureReasonPca_invalid_args                 FailureReason = "PCA_INVALID_ARGS"
	FailureReasonPca_invalid_duration             FailureReason = "PCA_INVALID_DURATION"
	FailureReasonPca_access_denied                FailureReason = "PCA_ACCESS_DENIED"
	FailureReasonOther                            FailureReason = "OTHER"
)

type Filters struct {

	// Specify one or more KeyUsage () extension values.
	KeyUsage []KeyUsageName

	// Specify one or more algorithms that can be used to generate key pairs. Default
	// filtering returns only RSA_2048 certificates. To return other certificate types,
	// provide the desired type signatures in a comma-separated list. For example,
	// "keyTypes": ["RSA_2048,RSA_4096"] returns both RSA_2048 and RSA_4096
	// certificates.
	KeyTypes []KeyAlgorithm

	// Specify one or more ExtendedKeyUsage () extension values.
	ExtendedKeyUsage []ExtendedKeyUsageName
}

type InvalidArgsException struct {
	Message *string
}

type InvalidArnException struct {
	Message *string
}

type InvalidDomainValidationOptionsException struct {
	Message *string
}

type InvalidParameterException struct {
	Message *string
}

type InvalidStateException struct {
	Message *string
}

type InvalidTagException struct {
	Message *string
}

type KeyAlgorithm string

const (
	KeyAlgorithmRsa_2048      KeyAlgorithm = "RSA_2048"
	KeyAlgorithmRsa_1024      KeyAlgorithm = "RSA_1024"
	KeyAlgorithmRsa_4096      KeyAlgorithm = "RSA_4096"
	KeyAlgorithmEc_prime256v1 KeyAlgorithm = "EC_prime256v1"
	KeyAlgorithmEc_secp384r1  KeyAlgorithm = "EC_secp384r1"
	KeyAlgorithmEc_secp521r1  KeyAlgorithm = "EC_secp521r1"
)

type KeyUsage struct {

	// A string value that contains a Key Usage extension name.
	Name KeyUsageName
}

type KeyUsageName string

const (
	KeyUsageNameDigital_signature   KeyUsageName = "DIGITAL_SIGNATURE"
	KeyUsageNameNon_repudation      KeyUsageName = "NON_REPUDIATION"
	KeyUsageNameKey_encipherment    KeyUsageName = "KEY_ENCIPHERMENT"
	KeyUsageNameData_encipherment   KeyUsageName = "DATA_ENCIPHERMENT"
	KeyUsageNameKey_agreement       KeyUsageName = "KEY_AGREEMENT"
	KeyUsageNameCertificate_signing KeyUsageName = "CERTIFICATE_SIGNING"
	KeyUsageNameCrl_signing         KeyUsageName = "CRL_SIGNING"
	KeyUsageNameEnchiper_only       KeyUsageName = "ENCIPHER_ONLY"
	KeyUsageNameDecipher_only       KeyUsageName = "DECIPHER_ONLY"
	KeyUsageNameAny                 KeyUsageName = "ANY"
	KeyUsageNameCustom              KeyUsageName = "CUSTOM"
)

type LimitExceededException struct {
	Message *string
}

type RecordType string

const (
	RecordTypeCname RecordType = "CNAME"
)

type RenewalEligibility string

const (
	RenewalEligibilityEligible   RenewalEligibility = "ELIGIBLE"
	RenewalEligibilityIneligible RenewalEligibility = "INELIGIBLE"
)

type RenewalStatus string

const (
	RenewalStatusPending_auto_renewal RenewalStatus = "PENDING_AUTO_RENEWAL"
	RenewalStatusPending_validation   RenewalStatus = "PENDING_VALIDATION"
	RenewalStatusSuccess              RenewalStatus = "SUCCESS"
	RenewalStatusFailed               RenewalStatus = "FAILED"
)

type RenewalSummary struct {

	// The reason that a renewal request was unsuccessful.
	RenewalStatusReason FailureReason

	// The status of ACM's managed renewal
	// (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html) of the
	// certificate.
	//
	// This member is required.
	RenewalStatus RenewalStatus

	// Contains information about the validation of each domain name in the
	// certificate, as it pertains to ACM's managed renewal
	// (https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html). This is
	// different from the initial validation that occurs as a result of the
	// RequestCertificate () request. This field exists only when the certificate type
	// is AMAZON_ISSUED.
	//
	// This member is required.
	DomainValidationOptions []*DomainValidation

	// The time at which the renewal summary was last updated.
	//
	// This member is required.
	UpdatedAt *time.Time
}

type RequestInProgressException struct {
	Message *string
}

type ResourceInUseException struct {
	Message *string
}

type ResourceNotFoundException struct {
	Message *string
}

type ResourceRecord struct {

	// The value of the CNAME record to add to your DNS database. This is supplied by
	// ACM.
	//
	// This member is required.
	Value *string

	// The type of DNS record. Currently this can be CNAME.
	//
	// This member is required.
	Type RecordType

	// The name of the DNS record to create in your domain. This is supplied by ACM.
	//
	// This member is required.
	Name *string
}

type RevocationReason string

const (
	RevocationReasonUnspecified            RevocationReason = "UNSPECIFIED"
	RevocationReasonKey_compromise         RevocationReason = "KEY_COMPROMISE"
	RevocationReasonCa_compromise          RevocationReason = "CA_COMPROMISE"
	RevocationReasonAffiliation_changed    RevocationReason = "AFFILIATION_CHANGED"
	RevocationReasonSuperceded             RevocationReason = "SUPERCEDED"
	RevocationReasonCessation_of_operation RevocationReason = "CESSATION_OF_OPERATION"
	RevocationReasonCertificate_hold       RevocationReason = "CERTIFICATE_HOLD"
	RevocationReasonRemove_from_crl        RevocationReason = "REMOVE_FROM_CRL"
	RevocationReasonPrivilege_withdrawn    RevocationReason = "PRIVILEGE_WITHDRAWN"
	RevocationReasonA_a_compromise         RevocationReason = "A_A_COMPROMISE"
)

type Tag struct {

	// The value of the tag.
	Value *string

	// The key of the tag.
	//
	// This member is required.
	Key *string
}

type TagPolicyException struct {
	Message *string
}

type TooManyTagsException struct {
	Message *string
}

type ValidationMethod string

const (
	ValidationMethodEmail ValidationMethod = "EMAIL"
	ValidationMethodDns   ValidationMethod = "DNS"
)