<?php

// PRC-1068 — SSL certificate management + reseller manual-install backstop.
return [
    'list_title' => 'SSL Certificates',
    'list_subtitle' => 'Manage issued certificates and complete reseller (manual) installations',

    // Columns
    'columns_id' => 'ID',
    'columns_client' => 'Client',
    'columns_common_name' => 'Common Name',
    'columns_product' => 'Product',
    'columns_module' => 'Module',
    'columns_status' => 'Status',
    'columns_expires' => 'Expires',
    'columns_created' => 'Created',
    'columns_actions' => 'Actions',

    // Status labels
    'status_pending' => 'Pending Install',
    'status_active' => 'Active',
    'status_revoked' => 'Revoked',
    'status_expired' => 'Expired',

    // Filters
    'filter_all_modules' => 'All Modules',
    'filter_all_states' => 'All Statuses',
    'filter_state_pending' => 'Pending Install',
    'filter_state_installed' => 'Installed',
    'filter_state_revoked' => 'Revoked',

    // Actions
    'action_view' => 'View / Install',
    'action_manual_install' => 'Manual Install',
    'action_revoke' => 'Revoke',

    // Manual install page
    'manual_install_title' => 'Manual Certificate Install',
    'manual_install_subtitle' => 'Paste the CA-issued certificate to complete the install',
    'manual_install_intro' => 'This certificate is awaiting a manual install. The reseller CA issues the certificate out-of-band — paste the PEM material below to mark it installed.',
    'context_client' => 'Client',
    'context_common_name' => 'Common Name',
    'context_product' => 'Product',
    'context_module' => 'Module',
    'context_csr' => 'CSR',
    'field_certificate' => 'Certificate (PEM)',
    'field_certificate_help' => 'The end-entity certificate issued by the CA, in PEM format.',
    'field_certificate_chain' => 'Certificate Chain (optional)',
    'field_certificate_chain_help' => 'Intermediate / CA bundle in PEM format, if supplied.',
    'field_private_key' => 'Private Key (optional)',
    'field_private_key_help' => 'Only if the reseller supplies the private key. Stored encrypted at rest.',
    'field_issuer' => 'Issuer (optional)',
    'field_issuer_help' => 'CA / issuer name, for display only.',
    'submit_install' => 'Complete Install',

    // Revoke confirm
    'confirm_revoke' => 'Revoke Certificate',
    'confirm_revoke_text' => 'This will mark the certificate as revoked. Continue?',

    // Messages
    'messages_installed' => 'Certificate installed successfully.',
    'messages_revoked' => 'Certificate revoked successfully.',
    'messages_already_revoked' => 'This certificate is already revoked.',
    'messages_not_pending' => 'This certificate is not pending (already installed or revoked) — manual install is not applicable.',
    'messages_load_error' => 'Failed to load certificates.',

    // Empty
    'none' => '—',
];
