# Language file for the EJBCA Administration GUI
# 
# Language name:    English
# Language code:    en (en-US)
# Native encoding:  UTF-8
# EJBCA supported:  6.x
# Modified date:    $Id: languagefile.en.properties 31725 2019-03-07 10:05:50Z tarmo_r_helmes $
# 
# Contributors:
#   PrimeKey Solutions <info@primekey.com>


### Language

#-- Name of this language written in English language.
LANGUAGE_ENGLISHNAME      = English

#-- Name of this language written in its own language.
LANGUAGE_NATIVENAME       = English


### General

ACCEPT                    = Accept

ACTIONS                   = Actions

ACTIVE                    = Active

ADD                       = Add

ADDANOTHER                = Add Another

ALL                       = All

ALLOW                     = Allow

AND                       = And

ANDNOT                    = And not

APPLY                     = Apply

ASTEMPLATE                = As Template

BACK                      = Back

BITS                      = bits

BOOL_TRUE                 = On

BOOL_FALSE                = Off

CANCEL                    = Cancel

CHARS                     = characters

CLONE                     = Clone

CLONE_CONFIRM             = Create from template

CLONE_SELECTED            = Clone selected

CLOSE                     = Close

CREATE                    = Create

CRITICAL                  = Critical

DATABASEDOWN              = Database problem. Please check that DB connection is OK!

DATE                      = Date

DATE_HELP                 = ISO 8601 date:

DAYS                      = Days

DAY_MONDAY                = Monday

DAY_TUESDAY               = Tuesday

DAY_WEDNESDAY             = Wednesday

DAY_THURSDAY              = Thursday

DAY_FRIDAY                = Friday

DAY_SATURDAY              = Saturday

DAY_SUNDAY                = Sunday

DECLINE                   = Decline

DEFAULT                   = Default

DELETE                    = Delete

DELETEALL                 = Delete all

DELETE_CONFIRM            = Confirm deletion

DELETE_SELECTED           = Delete Selected

DESCRIPTION               = Description

SERIALNUMBER_OCTET_SIZE   = CA Serial Number Octet Size

DESELECTALL               = Deselect All

DISABLED                  = Disabled

DOCUMENTATION             = Documentation

EDIT                      = Edit

ENCODING                  = Encoding

ENFORCE                   = Enforce

ERROR                     = Error

ERRORRECIEVINGFILE        = Error occurred when receiving file, are you sure it is valid and in PEM or binary encoding?

EXPORTABLE                = Using exportable cryptography

FORMAT_ALIAS              = Alias, string

FORMAT_CLASSPATH          = Class Path

FORMAT_DN                 = DN: Distinguished Name

FORMAT_DOMAINNAME         = Domain name

FORMAT_EMAILADDRESS       = E-mail address

FORMAT_FILENAME           = File name

FORMAT_GENERALNAMES       = GeneralName type names, comma separated [RFC 5280, § 4.2.1.6]

FORMAT_HEXA               = Hexadecimal string

FORMAT_HOSTNAME           = Host name

FORMAT_HOSTNAMES          = Host names, semicolon separated

FORMAT_ID_STR             = Identifier, string formated

FORMAT_INTEGER            = Integer number

FORMAT_ISO4217            = ISO 4217 code

FORMAT_ISO8601            = ISO 8601 format

FORMAT_MILLISECONDS       = Milliseconds, integer number

FORMAT_OID                = OID: Object Identifier, dot notation

FORMAT_OIDS               = List of OIDs, comma separated

FORMAT_REGEX              = Regular expression (regex), Java Pattern syntax

FORMAT_STRING             = String

FORMAT_TIME_YMD           = (*y *mo *d)

FORMAT_TIME_YMDHMIN       = (*y *mo *d *h *m)

FORMAT_TIME_YMODHMS       = (*y *mo *d *h *m *s)

FORMAT_URI                = URI: Uniform Resource Identifier (e.g. URL)

FORMAT_URL                = URL: Uniform Resource Locator (e.g. http://ejbca.org)

FROM                      = From

GENERATE                  = Generate

HARDTOKEN                 = Hard Token

HOURS                     = hours

IDENTIFIER                = Identifier (ID)

INTEGRATEDBY              = Integrated by

INVERTSELECTION           = Invert Selection

JAVASCRIPTDISABLED        = Please enable JavaScript!

KEY                       = Key

LABEL                     = Label

LOGOUT                    = Logout

MADEBYPRIMEKEY            = © 2002–2019 PrimeKey Solutions AB. EJBCA® is a registered trademark of PrimeKey Solutions AB.

MANDATORY                 = Mandatory

MESSAGE                   = Message

MINUTES                   = minutes

MO30DAYS                  = mo=30 days

MODIFY                    = Modify

MONTHJAN                  = Jan

MONTHFEB                  = Feb

MONTHMAR                  = Mar

MONTHAPR                  = Apr

MONTHMAY                  = May

MONTHJUN                  = Jun

MONTHJUL                  = Jul

MONTHAUG                  = Aug

MONTHSEP                  = Sep

MONTHOCT                  = Oct

MONTHNOV                  = Nov

MONTHDEC                  = Dec

MOVEUP                    = Move Up

MOVEDOWN                  = Move Down

NAME                      = Name

NEXT                      = Next

NO                        = No

NONE                      = None

NOTUSED                   = Not Used

OF                        = of

OFLENGTH                  = of length

OID                       = Object Identifier (OID)

ONLYCHARACTERS            = Only characters, numbers, underscores, minus and whitespace are allowed in field

ONLYCHARACTERS2           = Only characters, numbers, underscores, minus and whitespace are allowed in fields.

ONLYDECNUMBERS            = Only decimal numbers are allowed in field.

ONLYDNCHARACTERS          = Only characters, numbers, underscores, ‘.’ ‘-’ ‘,’ ‘=’ ‘(’ ‘)’ ‘/’ and ‘@’ are allowed in DN fields.

ONLYEMAILCHARSNOAT        = Only characters, numbers, underscores, ‘.’ ‘-’ and ' are allowed in e-mail field.

ONLYHEXNUMBERS            = Only hexadecimal numbers are allowed in certificate serial number field.

OPENHELPSECTION           = Click to open the relevant section in the help window.

OR                        = Or

ORENDDATE                 = \ or end date of the certificate

ORNOT                     = Or not

PERIOD                    = Period

PERIODICALINTERVAL        = Periodical Interval

PERIODICALSETTINGS        = Periodical Interval Settings

PLEASE_SELECT             = – Please select –

PLEASE_SELECT_ENCRYPTION_CRYPTOTOKEN = – Please select Crypto Token for key encryption –

PLEASE_SELECT_KEY         = – Please select a key –

POPUP_WINDOW              = (popup window)

POSTUPGRADE_REQUIRED      = Post upgrade is required once all nodes have been updated. Use “System Upgrade” menu item to finalize the process.

PREVIOUS                  = Previous

PROPERTIES                = Properties

RA                        = RA

RECURSIVE                 = Recursive

REMOVE                    = Remove

RENAME                    = Rename

RENAME_CONFIRM            = Confirm new name

RENAME_CURRENTNAME        = Current name

RENAME_NEWNAME            = New name

RENAME_SELECTED           = Rename selected

RESET                     = Reset

RESTORE                   = Restore

RESTRICT                  = Restrict

RULE                      = Rule

SAVE                      = Save

SAVE_AND_INITIALIZE       = Save and Initialize

SEARCH                    = Search

SELECT                    = Select

SELECTALL                 = Select All

SELECT_CRITERIA           = – Select a criteria –

SELECTFORREMOVAL          = Select for Removal

SHOW                      = Show

SUSPENDED                 = Suspended

SWITCHTOEDITMODE          = Switch to edit mode

SWITCHTOVIEWMODE          = Switch to view mode

UNIT_BITS                 = (bits)

UNIT_DAYS                 = (days)

UNIT_MSEC                 = (ms: milliseconds)

UNIT_YEARS                = (years)

UNLIMITED                 = Unlimited

UPDATE                    = Update

USE                       = Use

VALUE                     = Value

VERSION                   = Version :

VIEW                      = View

YEAR365DAYS               = y=365 days

YES                       = Yes

YEAR                      = Year

CONSTRAINTS               = Constraints


### Comparators

CONTAINS                  = Contains
ENDS_WITH                 = Ends with
EQUALS                    = Equals
GREATER_THAN              = Greater than
LESS_THAN                 = Less than
NOT_EQUALS                = Not equals
STARTS_WITH               = Starts with


### Mostly Main Module

AUTHORIZATIONDENIED       = Authorization Denied

CAUSE                     = Cause

ERRORNOBROWSER            = Error, your browser must support frames and JavaScript 1.3 in order to administer EJBCA properly.

EXCEPTIONOCCURED          = An exception has occurred.

NAV_HOME                  = Home

NAV_CAFUNCTIONS           = CA Functions

NAV_CASTRUCTUREANDCRL     = CA Structure & CRLs

NAV_CAACTIVATION          = CA Activation

NAV_CERTIFICATEPROFILES   = Certificate Profiles

NAV_CRYPTOTOKENS          = Crypto Tokens

NAV_PUBLISHERS            = Publishers

NAV_VALIDATORS            = Validators

NAV_CAS                   = Certification Authorities

NAV_RAFUNCTIONS           = RA Functions

NAV_USERDATASOURCES       = User Data Sources

NAV_ENDENTITYPROFILES     = End Entity Profiles

NAV_ADDENDENTITY          = Add End Entity

NAV_SEARCHENDENTITIES     = Search End Entities

NAV_HARDTOKENFUNCTIONS    = Hard Token Functions

NAV_HARDTOKENPROFILES     = Hard Token Profiles

NAV_HARDTOKENISSUERS      = Hard Token Issuers

NAV_SUPERVISIONFUNCTIONS  = Supervision Functions

NAV_APPROVEACTIONS        = Approve Actions

NAV_APPROVALPROFILES      = Approval Profiles

NAV_AUDIT                 = View Log

NAV_ACMECONFIGURATION      = ACME Configuration

NAV_CMPCONFIGURATION      = CMP Configuration

NAV_SCEPCONFIGURATION     = SCEP Configuration

NAV_ESTCONFIGURATION      = EST Configuration

NAV_SYSTEMFUNCTIONS       = System Functions

NAV_SYSTEMCONFIGURATION   = System Configuration

NAV_SYSTEMUPGRADE         = System Upgrade

NAV_SERVICES              = Services

NAV_KEYBINDINGS           = Internal Key Bindings

NAV_ROLES                 = Administrator Roles

NAV_MYPREFERENCES         = My Preferences

PUBLICWEB                 = Public Web

RAWEB                     = RA Web

TOEJBCA                   = to EJBCA Administration.

WELCOME                   = Welcome


### Crypto Tokens

CRYPTOTOKEN               = Crypto Token

MANAGECRYPTOTOKENS        = Manage Crypto Tokens

CRYPTOTOKEN_ACTIONS       = Actions

CRYPTOTOKEN_ACTIVATE      = Activate

CRYPTOTOKEN_ACTIVE        = Active

CRYPTOTOKEN_ALLOWEXPORT   = Allow export of private keys

CRYPTOTOKEN_USEEXPLICITKEYPARAMETERS   = Use explicit ECC parameters (ICAO CSCA and DS certificates)

CRYPTOTOKEN_ATTRFILE      = Attribute File

CRYPTOTOKEN_AUTO          = Auto-activation

CRYPTOTOKEN_CANCEL        = Cancel

CRYPTOTOKEN_CREATENEW     = Create new...

CRYPTOTOKEN_DEACTIVATE    = Deactivate

CRYPTOTOKEN_DELETE_CONFIRM= Are you sure you want to remove this Crypto Token?

CRYPTOTOKEN_ID            = ID

CRYPTOTOKEN_KPM_ACTION    = Action

CRYPTOTOKEN_KPM_ALIAS     = Alias

CRYPTOTOKEN_KPM_ALGO      = Key Algorithm

CRYPTOTOKEN_KPM_CONF_REM  = Are you sure you want to remove this key?

CRYPTOTOKEN_KPM_CONF_REMS = Are you sure you want to remove selected keys?

CRYPTOTOKEN_KPM_DOWNPUB   = Download Public Key

CRYPTOTOKEN_KPM_GENNEW    = Generate new key pair

CRYPTOTOKEN_KPM_NA        = Key pair management is only available for active Crypto Tokens.

CRYPTOTOKEN_KPM_NOPAIRS   = Crypto Token currently does not contain any key pairs.

CRYPTOTOKEN_KPM_REMOVE    = Remove

CRYPTOTOKEN_KPM_REMOVESEL = Remove selected

CRYPTOTOKEN_KPM_SKID      = SubjectKeyID

CRYPTOTOKEN_KPM_SPEC      = Key Specification

CRYPTOTOKEN_KPM_TEST      = Test

CRYPTOTOKEN_KPM_GENFROMTEMPLATE = Generate

CRYPTOTOKEN_KPM_NOTGENERATED = (Not generated)

CRYPTOTOKEN_LIBRARY       = Library

CRYPTOTOKEN_NAME          = Name

CRYPTOTOKEN_NEW           = New Crypto Token

CRYPTOTOKEN_NAV_BACK      = Back to Crypto Token overview

CRYPTOTOKEN_NAV_BACK_ACT  = Back to CA Activation overview

CRYPTOTOKEN_NAV_EDIT      = Switch to edit mode

CRYPTOTOKEN_PIN           = Authentication Code

CRYPTOTOKEN_PIN_NOTICE    = (existing activation PIN, can not change or set PIN on the token)

CRYPTOTOKEN_PIN_REPEAT    = Repeat Authentication Code

CRYPTOTOKEN_REACTIVATE    = Reactivate

CRYPTOTOKEN_REFDHEAD      = Used

CRYPTOTOKEN_UNUSED        = No

CRYPTOTOKEN_REFD          = Yes

CRYPTOTOKEN_SAVE          = Save

CRYPTOTOKEN_SAVE_CONFIRM  = Confirm Save

CRYPTOTOKEN_SLOT          = Reference

CRYPTOTOKEN_LABEL_TYPE    = Reference Type

CRYPTOTOKEN_LABEL_TYPE_SLOT_LABEL = Slot/Token Label

CRYPTOTOKEN_LABEL_TYPE_SLOT_INDEX = Slot Index

CRYPTOTOKEN_LABEL_TYPE_SLOT_NUMBER = Slot ID

CRYPTOTOKEN_LABEL_TYPE_SUN_FILE = Sun Configuration File

CRYPTOTOKEN_TYPE          = Type

CRYPTOTOKEN_TYPE_P11      = PKCS#11

CRYPTOTOKEN_TYPE_SOFT     = Soft

CRYPTOTOKEN_VIEWWITH      = View Crypto Token with ID

CRYPTOTOKEN_MISSING_OR_EMPTY = Missing or empty Crypto Token ID.

CRYPTOTOKEN_NEED_EXISTING_OR_GEN = You need to select a Crypto Token that exists, or generate keys if it exists, before you can edit!


### Internal Key Bindings

INTERNALKEYBINDING = Internal Key Binding
INTERNALKEYBINDINGS = Internal Key Bindings
INTERNALKEYBINDING_NAME     = Name
INTERNALKEYBINDING_VIEWWITH = View Internal Key Binding with ID
INTERNALKEYBINDING_CERTIFICATEISSUER = Issuer
INTERNALKEYBINDING_NOT_PRESENT = None
INTERNALKEYBINDING_CERTIFICATESERIAL = Serial Number
INTERNALKEYBINDING_CRYPTOTOKEN = Crypto Token
INTERNALKEYBINDING_KEYPAIRALIAS = Current Key Pair
INTERNALKEYBINDING_NEXTKEYPAIRALIAS = Next Key Pair
INTERNALKEYBINDING_STATUS = Status
INTERNALKEYBINDING_ACTIONS = Actions
INTERNALKEYBINDING_GENERATENEWKEY_SHORT = New keys
INTERNALKEYBINDING_GENERATENEWKEY_FULL = Generate new key pair with the same key specifications as the current key pair and a different postfix
INTERNALKEYBINDING_RENEWCERTIFICATE_SHORT = Renew
INTERNALKEYBINDING_RENEWCERTIFICATE_FULL = Renew Certificate using the same internal CA using the same meta data as for the current certificate
INTERNALKEYBINDING_GETCSR_SHORT = CSR
INTERNALKEYBINDING_GETCSR_FULL = Create a new certificate signing request (CSR) for the next or current key pair
INTERNALKEYBINDING_RELOADCERTIFICATE_SHORT = Update
INTERNALKEYBINDING_RELOADCERTIFICATE_FULL = Search database for an updated certificate matching the next or current key pair
INTERNALKEYBINDING_DELETE_SHORT = Delete
INTERNALKEYBINDING_DELETE_FULL = Delete the InternalKeyBinding, leaving certificates and keys intact
INTERNALKEYBINDING_CONF_DELETE = Confirm removal of InternalKeyBinding
INTERNALKEYBINDING_CREATENEW = Create new...
INTERNALKEYBINDING_DEFAULTRESPONDER = Default Responder
INTERNALKEYBINDING_SET_DEFAULTRESPONDER = Set Default Responder
INTERNALKEYBINDING_DEFAULT_RESPONDERIDTYPE = Default OCSP Responder ID Type
INTERNALKEYBINDING_ENABLED_NONCE_CA = Enabled nonce extension in OCSP replies from CAs
INTERNALKEYBINDING_SET_ENABLE_NONCE_CA = Enable nonce extension in OCSP replies from CAs
INTERNALKEYBINDING_SET_DEFAULT_RESPONDERIDTYPE = Responder ID Type for CAs
INTERNALKEYBINDING_DISABLE_SHORT = Disable
INTERNALKEYBINDING_DISABLE_FULL = Make the InternalKeyBinding unavailable to any system it is used by
INTERNALKEYBINDING_ENABLE_SHORT = Enable
INTERNALKEYBINDING_ENABLE_FULL = Make the InternalKeyBinding available to any system it is used by
INTERNALKEYBINDING_CA = Certificate Authority
INTERNALKEYBINDING_SERIALNUMER = Serial number (hex)
INTERNALKEYBINDING_UPLOAD = Import
INTERNALKEYBINDING_UPLOADHEADER = Import externally issued certificate
INTERNALKEYBINDING_UPLOAD_TARGET = Target
INTERNALKEYBINDING_UPLOAD_CERTIFICATE = Certificate
INTERNALKEYBINDING_TRUSTENTRY_DESCRIPTION = Description
INTERNALKEYBINDING_TRUSTENTRY_TITLE = Optional description
INTERNALKEYBINDING_TRUSTINGANY = Trusting ANY certificates issued by ANY CA known to this EJBCA instance
INTERNALKEYBINDING_EMPTYFORANY = Leave empty for ‘ANY’ Certificate Serial Number.
INTERNALKEYBINDING_NOTYETGENERATED = Not yet generated
INTERNALKEYBINDING_CRYPTOTOKEN_NOTACTIVE = (Not active)
INTERNALKEYBINDING_CRYPTOTOKEN_MISSING = (Missing)
INTERNALKEYBINDING_CRYPTOTOKEN_UPDATENEXT = Update next
INTERNALKEYBINDING_KEYPAIRALIAS_UPDATE = Update next
INTERNALKEYBINDING_FIELD_ID = ID
INTERNALKEYBINDING_FIELD_TYPE = Type
INTERNALKEYBINDING_FIELD_NAME = Name
INTERNALKEYBINDING_FIELD_CRYPTOTOKEN = Crypto Token
INTERNALKEYBINDING_FIELD_KEYPAIRALIAS = Key Pair Alias
INTERNALKEYBINDING_FIELD_SIGALG = Signature Algorithm
INTERNALKEYBINDING_FIELD_NEXTKEYPAIRALIAS = Next Key Pair Alias
INTERNALKEYBINDING_FIELD_BOUNDCERT = Bound Certificate
INTERNALKEYBINDING_FIELD_NONE = None
INTERNALKEYBINDING_FIELD_NOTSPECIFIED = Not specified
INTERNALKEYBINDING_BACKTOOVERVIEW = Back to {0} overview
INTERNALKEYBINDING_TRUSTEDCERTIFICATES = Trusted certificates
INTERNALKEYBINDING_PROPERTIES = Properties
INTERNALKEYBINDING_NOPROPERTIES = There are no properties that can be configured.
INTERNALKEYBINDING_SAVE = Save
INTERNALKEYBINDING_SET = Set
INTERNALKEYBINDING_STATUS_ACTIVE = Enabled
INTERNALKEYBINDING_STATUS_DISABLED = Disabled
INTERNALKEYBINDING_STATUS_REVOKED = Revoked
INTERNALKEYBINDING_STATUS_NOTYETVALID = Not yet valid
INTERNALKEYBINDING_STATUS_EXPIRED = Expired

INTERNALKEYBINDING_OPERATIONAL_STATUS = Active
INTERNALKEYBINDING_OPERATIONAL_STATUS_ONLINE = Online
INTERNALKEYBINDING_OPERATIONAL_STATUS_PENDING = Pending
INTERNALKEYBINDING_OPERATIONAL_STATUS_OFFLINE = Offline

#-- Internal Key Bindings: OcspKeyBinding
INTERNALKEYBINDING_OCSPKEYBINDING_DESCRIPTION = Used for delegation of OCSP response signing to a non-CA key pair.
INTERNALKEYBINDING_OCSPKEYBINDING_ENABLENONCE = Enable nonce in response
INTERNALKEYBINDING_OCSPKEYBINDING_INCLUDECERTCHAIN = Include certificate chain in response
INTERNALKEYBINDING_OCSPKEYBINDING_INCLUDESIGNCERT = Include signing certificate in response
INTERNALKEYBINDING_OCSPKEYBINDING_MAXAGE = Max-Age HTTP header (seconds)
INTERNALKEYBINDING_OCSPKEYBINDING_NODEFAULTRESPONDER = None
INTERNALKEYBINDING_OCSPKEYBINDING_NONEXISTINGISGOOD = Non existing is good
INTERNALKEYBINDING_OCSPKEYBINDING_NONEXISTINGISREVOKED = Non existing is revoked
INTERNALKEYBINDING_OCSPKEYBINDING_NONEXISTINGISUNAUTHORIZED = Non existing is unauthorized
INTERNALKEYBINDING_OCSPKEYBINDING_REQUIRETRUSTEDSIGNATURE = Request must be signed with a trusted certificate
INTERNALKEYBINDING_OCSPKEYBINDING_RESPONDERIDTYPE = ResponderID
INTERNALKEYBINDING_OCSPKEYBINDING_UNTILNEXTUPDATE = Response validity (seconds)
INTERNALKEYBINDING_OCSPKEYBINDING_OCSPEXTENSIONHEADER = OCSP Extensions
INTERNALKEYBINDING_OCSPKEYBINDING_OCSPEXTENSION_NAME = Extension
INTERNALKEYBINDING_OCSPKEYBINDING_OCSPEXTENSION_OID = OID

#-- Internal Key Bindings: AuthenticationKeyBinding
INTERNALKEYBINDING_AUTHENTICATIONKEYBINDING_DESCRIPTION = Used for client SSL authentication to other systems.
INTERNALKEYBINDING_AUTHENTICATIONKEYBINDING_PROTOCOLANDCIPHERSUITE = Protocol and Cipher Suite


### X.509 Certificate and CRL

#-- Subject Alternative Name

ALT_NONE                    = None

ALT_KERBEROS_KPN            = Kerberos KPN, Kerberos 5 Principal Name

ALT_MS_GUID                 = MS GUID, Globally Unique Identifier

ALT_MS_UPN                  = MS UPN, User Principal Name

ALT_MS_UPN_HELP             = (Use only the domain part of the name, without the ‘@’ char)

ALT_NIST_FASCN              = Federal Agency Smart Credential Number (FASC-N)

ALT_PKIX_DIRECTORYNAME      = Directory Name (Distinguished Name)

ALT_PKIX_DNSNAME            = DNS Name

ALT_PKIX_EDIPARTYNAME       = EDI Party Name

ALT_PKIX_IPADDRESS          = IP Address

ALT_PKIX_OTHERNAME          = Other Name

ALT_PKIX_PERMANENTIDENTIFIER= Permanent Identifier

ALT_PKIX_REGISTEREDID       = Registered Identifier (OID)

ALT_PKIX_RFC822NAME         = RFC 822 Name (e-mail address)

ALT_PKIX_SRVNAME            = Service Name

ALT_PKIX_SUBJECTIDENTIFICATIONMETHOD = Subject Identification Method (SIM)

ALT_PKIX_UNIFORMRESOURCEID  = Uniform Resource Identifier (URI)

ALT_PKIX_X400ADDRESS        = X.400 Address

ALT_PKIX_XMPPADDR           = XmppAddr

#-- Certificate fields

CERT_TYPEVERSION            = Certificate Type/Version

CERT_SERIALNUMBER           = Certificate Serial Number

CERT_SERIALNUMBER_HEXA      = Certificate serial number in hex

CERT_SERIALNUMBER_CUSTOM    = Custom certificate serial number

CERT_ISSUERDN               = Issuer DN

CERT_VALIDITY               = Validity

CERT_CORRECT_VALIDITY       = correct validity

CERT_VALIDITY_CA_HELP       = (used when CA is renewed)

CERT_VALIDITY_OFFSET        = Validity Offset

CERT_VALIDFROM              = Valid from

CERT_VALIDTO                = Valid to

CERT_EXPIRATION_RESTRICTIONS = Expiration Restrictions

CERT_EXPIRATION_RESTRICTION_FOR_WEEKDAYS = Don’t expire on these days:

CERT_EXPIRATION_RESTRICTION_FOR_WEEKDAYS_BUT = but expire

CERT_EXPIRATION_RESTRICTION_BEFORE = before

CERT_EXPIRATION_RESTRICTION_AFTER = after

CERT_EXPIRATION_RESTRICTION_FIXED_DATE_CHANGED = Fixed date for certificate validity was changed from {0} to {1} because of expiration restrictions for weekdays.

CERT_EXPIRATION_RESTRICTION_FOR_WEEKDAYS_ALL_EXCLUDED = The expiration restriction for weekdays cannot include all weekdays! 

CERT_SUBJECTDN              = Subject DN

CERT_SUBJECTDN_ATTRIBUTES   = Subject DN Attributes

CERT_SUBJECTDN_CNPOSTFIX    = CN postfix

CERT_SUBJECTDN_CNPF_HELP    = (text appended after first CN field)

CERT_SUBJECTDN_CUSTOMORDER  = Custom Subject DN Order

CERT_SUBJECTDN_CUSTOMORDER_HELP = (comma separated list of DN components)

CERT_SUBJECTDN_CUSTOMORDER_LDAP = Apply LDAP DN order setting

CERT_SUBJECTDN_LDAPORDER    = LDAP DN order

CERT_SUBJECTDN_PRINTABLESTR = PrintableString encoding in DN

CERT_SUBJECTDN_SUBSET       = Subset of Subject DN

CERT_PUBLICKEY              = Public key

CERT_EXTENSIONDATA          = Certificate Extension Data

CERT_EXTENSIONDATA_CUSTOM   = Custom certificate extension data

#-- CRL data

CRL_CA_CRLDP_EXTERNAL       = External CRL Distribution Point

CRL_CA_DEFAULTVALUES_HELP   = (used in CRL, and as default value)

CRL_CA_CRLPERIOD            = CRL Expire Period

CRL_CA_ISSUEINTERVAL        = CRL Issue Interval

CRL_CA_OVERLAPTIME          = CRL Overlap Time

CRL_CA_DELTACRLPERIOD       = Delta CRL Period

CRL_CA_DELTACRLPERIOD_HELP  = (0m, if no delta CRLs are issued)

CRL_CA_MERGECRLSAFTERCASUBJECTDNCHANGE  = Merge CRLs after CA Subject DN Change (ICAO 9303)

CRL_EXT_AUTHORITYKEYID      = Authority Key ID

CRL_EXT_CRLNUMBER           = CRL Number

CRL_EXT_ISSUINGDISTPOINT    = Issuing Distribution Point on CRLs

CRL_EXT_CAISSUERS_URI       = CA issuer URI

CRL_ENTRY_REVOCATIONDATE    = Revocation date :

CRL_ENTRY_REVOCATIONREASON  = Revocation reason :

#-- DN attributes

DN_ABBR_COMMONNAME          = CN

DN_ABBR_ORGANIZATIONALUNIT  = OU

DN_ABBR_ORGANIZATION        = O (organization)

DN_ETSI_ORGANIZATION_IDENTIFIER = organizationIdentifier, Organization identifier

DN_JURISDICTION_LOCALITY    = Jurisdiction Locality [EV Certificate]

DN_JURISDICTION_STATE       = Jurisdiction State or Province [EV Certificate]

DN_JURISDICTION_COUNTRY     = Jurisdiction Country (ISO 3166) [EV Certificate]

DN_PKIX_DESCRIPTION         = description, Description

DN_PKIX_EMAILADDRESS        = emailAddress, E-mail address in DN 

DN_PKIX_EMAILADDRESS_HELP   = See also configuration of E-mail field.

DN_PKIX_UID                 = UID, Unique Identifier

DN_PKIX_COMMONNAME          = CN, Common name

DN_PKIX_SERIALNUMBER        = serialNumber, Serial number (in DN)

DN_PKIX_GIVENNAME           = givenName, Given name (first name)

DN_PKIX_INITIALS            = initials, First name abbreviation

DN_PKIX_SURNAME             = surname, Surname (last name)

DN_PKIX_TITLE               = title, Title

DN_PKIX_ORGANIZATIONALUNIT  = OU, Organizational Unit

DN_PKIX_ORGANIZATION        = O, Organization

DN_PKIX_LOCALITY            = L, Locality

DN_PKIX_STATEORPROVINCE     = ST, State or Province

DN_PKIX_DOMAINCOMPONENT     = DC, Domain Component

DN_PKIX_COUNTRY             = C, Country (ISO 3166)

DN_PKIX_UNSTRUCTUREDADDRESS = unstructuredAddress, IP address

DN_PKIX_UNSTRUCTUREDNAME    = unstructuredName, Domain name (FQDN)

DN_PKIX_POSTALCODE          = postalCode

DN_PKIX_BUSINESSCATEGORY    = businessCategory, Organization type

DN_PKIX_DNQUALIFIER         = dnQualifier, DN Qualifier

DN_PKIX_POSTALADDRESS       = postalAddress

DN_PKIX_TELEPHONENUMBER     = telephoneNumber

DN_PKIX_PSEUDONYM           = pseudonym

DN_PKIX_STREETADDRESS       = streetAddress

DN_PKIX_NAME                = name

DN_SPAIN_CIF                = CIF, Tax ID code, for companies (Spain)

DN_SPAIN_NIF                = NIF, Tax ID number, for individuals (Spain)

#-- Extended Key Usage

EKU_EDIT_EKU_TITLE          = Add or remove available Extended Key Usages

EKU_VIEW_EKU_TITLE          = View available Extended Key Usages

EKU_NONE                    = None

EKU_ADOBE_PDFSIGNING        = PDF Signing

EKU_CSN_TLSCLIENT           = CSN 369791 TLS client

EKU_CSN_TLSSERVER           = CSN 369791 TLS server

EKU_ETSI_TSLSIGNING         = ETSI TSL Signing

EKU_ICAO_MASTERLISTSIGNING  = ICAO Master List Signing

EKU_INTEL_AMT               = Intel AMT management

EKU_MS_SMARTCARDLOGON       = MS Smart Card Logon

EKU_MS_DOCUMENTSIGNING      = MS Document Signing

EKU_MS_CODESIGNING_COM      = MS Commercial Code Signing

EKU_MS_CODESIGNING_IND      = MS Individual Code Signing

EKU_MS_EFSCRYPTO            = MS Encrypted File System (EFS)

EKU_MS_EFSRECOVERY          = MS EFS Recovery

EKU_NIST_PIVCARDAUTH        = PIV Card Authentication

EKU_PKIX_ANYEXTENDEDKEYUSAGE= Any Extended Key Usage

EKU_PKIX_SERVERAUTH         = Server Authentication

EKU_PKIX_CLIENTAUTH         = Client Authentication

EKU_PKIX_CODESIGNING        = Code Signing

EKU_PKIX_EMAILPROTECTION    = Email Protection

#EKU_PKIX_IPSECENDSYSTEM    = IPSec End System

#EKU_PKIX_IPSECTUNNEL       = IPSec Tunnel

#EKU_PKIX_IPSECUSER         = IPSec User

EKU_PKIX_TIMESTAMPING       = Time Stamping

EKU_PKIX_OCSPSIGNING        = OCSP Signer

EKU_PKIX_EAPOVERPPP         = EAP over PPP

EKU_PKIX_EAPOVERLAN         = EAP over LAN (EAPOL)

EKU_PKIX_SCVPSERVER         = SCVP Server

EKU_PKIX_SCVPCLIENT         = SCVP Client

EKU_PKIX_IPSECIKE           = Internet Key Exchange for IPsec

EKU_PKIX_SIPDOMAIN          = SIP Domain

EKU_PKIX_SSHCLIENT          = SSH Client

EKU_PKIX_SSHSERVER          = SSH Server

EKU_KRB_PKINIT_CLIENT       = Kerberos Client Authentication

EKU_KRB_PKINIT_KDC          = Kerberos KDC (Key Distribution Center)

#-- Certificate extensions

EXT_HEADER_QCSTATEMENTS = QC Statements extension

EXT_HEADER_CERTIFICATETRANSPARENCY = Certificate Transparency extension

EXT_UNUSED                  = Unused

EXT_CRITICAL                = Critical

EXT_ABBR_BASICCONSTRAINTS   = Basic constraints

EXT_ABBR_KEYUSAGE           = Key usage

EXT_ABBR_EXTENDEDKEYUSAGE   = Extended key usage

EXT_ABBR_SUBJECTALTNAME     = Subject Alternative Name

EXT_ABBR_SUBJECTDIRATTRS    = Subject Directory Attributes

EXT_ABBR_NAMECONSTRAINTS    = Name constraints

EXT_ABBR_AUTHORITYINFOACCESS= Authority Information Access

EXT_ABBR_QCSTATEMENTS       = Qualified Certificates Statements

EXT_ICAO_DOCUMENTTYPELIST   = ICAO Document Type List

EXT_MS_TEMPLATENAME         = Microsoft Certificate Template Name

EXT_MS_TEMPLATENAME_HELP    = (only the name, not the actual template)

EXT_PKIX_BASICCONSTRAINTS   = Basic Constraints

EXT_PKIX_BC_PATHLENGTH      = Path Length Constraint

EXT_PKIX_BC_CANOLIMIT       = CA, No path length constraint

EXT_PKIX_BC_CAPATHLENGTH    = CA, Path length constraint

EXT_PKIX_BC_ENDENTITY       = End Entity

EXT_PKIX_AUTHORITYKEYID     = Authority Key ID

EXT_PKIX_SUBJECTKEYID       = Subject Key ID

EXT_PKIX_KEYUSAGE           = Key Usage

EXT_PKIX_EXTENDEDKEYUSAGE   = Extended Key Usage

EXT_PKIX_ISSUERALTNAME      = Issuer Alternative Name

EXT_PKIX_SUBJECTALTNAME     = Subject Alternative Name

EXT_PKIX_SAN_SUBSET         = Subset of Subject Alt. Name

EXT_PKIX_SUBJECTDIRATTRS    = Subject Directory Attributes

EXT_PKIX_NAMECONSTRAINTS    = Name Constraints

EXT_PKIX_NC_PERMITTED       = Name Constraints, Permitted

EXT_PKIX_NC_PERMITTED_HELP1 = List of domain names, IPv4/IPv6 address/netmask pairs, DNs and RFC 822 Names. One per line.

EXT_PKIX_NC_PERMITTED_HELP2 = Examples: example.com 198.51.100.0/24 CN=Name,O=Company @example.com

EXT_PKIX_NC_EXCLUDED        = Name Constraints, Excluded

EXT_PKIX_NC_EXCLUDED_HELP   = Use 0.0.0.0/0 and ::/0 to disallow certificates for all plain IP addresses.

EXT_PKIX_CRLDISTRIBPOINTS   = CRL Distribution Points

EXT_PKIX_CDP_CADEFINED      = Use CA defined CRL Distribution Point

EXT_PKIX_CDP_URI            = CRL Distribution Point URI

EXT_PKIX_CDP_DEFAULTURI     = Default CRL Distribution Point

EXT_PKIX_CDP_CRLISSUER      = CRL Issuer

EXT_PKIX_CDP_DEFAULTCRLISSUER = Default CRL Issuer

EXT_PKIX_FRESHESTCRL        = Freshest CRL (a.k.a. Delta CRL DP)

EXT_PKIX_FCRL_CADEFINED     = Use CA Defined Freshest CRL

EXT_PKIX_FCRL_URI           = Freshest CRL URI

EXT_PKIX_FCRL_DEFAULTURI    = Default Freshest CRL Distribution Point

EXT_PKIX_CERTIFICATEPOLICIES= Certificate Policies

EXT_PKIX_CP_POLICYID        = Certificate Policy OID

EXT_PKIX_CP_POLICYID_HELP   = (leave policy OID blank to use default certificate profile values)

EXT_PKIX_CP_POLICYQUALID    = Certificate Policy Qualifier type

EXT_PKIX_CP_NOQUAL          = No Policy Qualifier

EXT_PKIX_CP_CPSURI          = CPS URI

EXT_PKIX_CP_USERNOTICE      = User Notice Text

EXT_PKIX_CP_UTF8NOTICETEXT  = Use UTF-8 in policy notice text

EXT_PKIX_AUTHORITYINFOACCESS= Authority Information Access

EXT_PKIX_AIA_OCSP_CADEFINED = Use CA defined OCSP locator

EXT_PKIX_AIA_OCSP_URI       = OCSP Service Locator URI

EXT_PKIX_AIA_OCSP_DEFAULTURI = OCSP service Default URI

EXT_PKIX_AIA_CAISSUERS_CADEFINED = Use CA defined CA issuer

EXT_PKIX_AIA_CAISSUERS_URI  = CA issuer URI

EXT_PKIX_AIA_CAISSUERS_DEFAULTURI = CA issuer Default URI

EXT_PKIX_PRIVKEYUSAGEPERIOD = Private Key Usage Period

EXT_PKIX_PKUP_STARTOFFSET   = Start offset

EXT_PKIX_PKUP_PERIODLENGTH  = Period length

EXT_PKIX_QCSTATEMENTS       = Qualified Certificates Statements

EXT_PKIX_QCS_PKIXQCSYNTAXV2 = PKIX QCSyntax-v2

EXT_PKIX_QCS_SEMANTICSID    = Semantics Identifier (OID)

EXT_PKIX_QCS_NAMERAS        = Name Registration Authorities

EXT_ETSI_QCS_QCCOMPLIANCE   = ETSI Qualified Certificate compliance

EXT_ETSI_QCS_QSCD           = ETSI Qualified Signature/Seal Creation Device

EXT_ETSI_QCS_VALUELIMIT     = ETSI transaction value limit

EXT_ETSI_QCS_VL_CURRENCY    = Currency

EXT_ETSI_QCS_VL_AMOUNT      = Amount

EXT_ETSI_QCS_VL_EXPONENT    = Exponent

EXT_ETSI_QCS_RETENTIONPERIOD= ETSI retention period

EXT_ETSI_QCS_TYPE           = ETSI type

EXT_ETSI_QCS_TYPE_unused    = Unused

EXT_ETSI_QCS_TYPE_esign     = Electronic Signature

EXT_ETSI_QCS_TYPE_eseal     = Electronic Seal

EXT_ETSI_QCS_TYPE_web       = Website Authentication

EXT_ETSI_QCS_PDS            = ETSI PDS URL / Language

EXT_ETSI_QCS_PDS_error_message = Please insert a valid HTTPS URL for ETSI PDS URL.

EXT_PKIX_QCS_CUSTOMSTRING   = Custom QC-statements String

EXT_PKIX_QCS_CUSTOMSTR_OID  = Object Identifier (OID)

EXT_PKIX_QCS_CUSTOMSTR_TEXT = Custom QC-statements Text

EXT_PKIX_OCSPNOCHECK        = OCSP No Check

EXT_SEIS_CARDNUMBER         = Card Number Extension

EXT_CERTIFICATE_TRANSPARENCY= Certificate Transparency

EXT_CERTIFICATE_TRANSPARENCY_SCTS= Certificate Transparency SCTs

EXT_CT_USE_IN_CERTS         = Use in new certificates

EXT_CT_USE_IN_OCSP          = Use in OCSP responses

EXT_CT_USE_PUBLISHERS       = Use CT publishers

EXT_CT_PUBLISHERMUSTBECREATED = To use a CT publisher, it must also be enabled at the bottom of this page.

EXT_CT_ENABLEDLABELS        = Enabled CT Labels

EXT_CT_NUMOFSCTS_BY_VALIDITY = By validity

EXT_CT_NUMOFSCTS_BY_CUSTOM  = Custom…

EXT_CT_NUMOFSCT_MIN         = Minimum number of SCTs

EXT_CT_NUMOFSCT_MAX         = Maximum number of SCTs

EXT_CT_PER_CERTIFICATE      = per certificate

EXT_CT_PER_OCSPRESPONSE     = per OCSP response

EXT_CT_SUBMITEXISTING       = Submit existing certificates

EXT_CT_MAXRETRIES           = Number of retries

#-- Key Usage

KU_NONE                     = None

KU_DIGITALSIGNATURE         = Digital Signature

KU_NONREPUDIATION           = Non-repudiation

KU_KEYENCIPHERMENT          = Key encipherment

KU_DATAENCIPHERMENT         = Data encipherment

KU_KEYAGREEMENT             = Key agreement

KU_KEYCERTSIGN              = Key certificate sign

KU_CRLSIGN                  = CRL sign

KU_ENCIPHERONLY             = Encipher only

KU_DECIPHERONLY             = Decipher only

#-- Revocation reasons

REV_NONE                    = None

REV_UNSPECIFIED             = Unspecified

REV_KEYCOMPROMISE           = Key compromise

REV_CACOMPROMISE            = CA compromise

REV_AFFILIATIONCHANGED      = Affiliation changed

REV_SUPERSEDED              = Superseded

REV_CESSATIONOFOPERATION    = Cessation of operation

REV_CERTIFICATEHOLD         = Certificate hold

REV_UNUSED                  = (unused)

REV_REMOVEFROMCRL           = Remove from CRL

REV_PRIVILEGEWITHDRAWN      = Privileges withdrawn

REV_AACOMPROMISE            = AA compromise

#-- Subject Directory Attributes

SDA_NONE                    = None

SDA_DATEOFBIRTH             = Date of birth (YYYYMMDD)

SDA_PLACEOFBIRTH            = Place of birth

SDA_GENDER                  = Gender (M/F)

SDA_COUNTRYOFCITIZENSHIP    = Country of citizenship (ISO 3166)

SDA_COUNTRYOFRESIDENCE      = Country of residence (ISO 3166)


### Mostly Approval Module

ACTION                    = Action

ALREADYREVOKED            = Already revoked

ANYENDENTITYPROFILE       = Any End Entity Profile

APACTIVATECATOKEN         = Activate CA Token

APADDENDENTITY            = Add End Entity

APCHANGESTATUSENDENTITY   = Change Status of End Entity

APCOMMENT                 = Comment

APDUMMY                   = Dummy Action

APEDITENDENTITY           = Edit End Entity

APGENERATETOKEN           = Generate Token

APKEYRECOVERY             = Key Recover

APREVOKEENDENTITY         = Revoke End Entity

APREVOKEDELETEENDENTITY   = Revoke and Delete End Entity

APREVOKECERTIFICATE       = Revoke or Reactivate Certificate

APVIEWHARDTOKENDATA       = View Hard Token PUK Data

APPROVALREQUESTEXPIRED    = Approval Request Expired.

APPROVALREQUESTSFOUND     = Approval requests found.

APPROVALSETTINGS          = Approval Settings

APPROVE                   = Approve

APPROVEACTION             = Approve Action

APPROVEACTIONNAME         = Approve Action Name

APPROVEACTIONS            = Approve Actions

APPROVEACTIVATECA         = CA Service Activation

APPROVED                  = Approved

APPROVEDBY                = Approved By

APPROVEADDEDITENDENTITY   = Add/Edit End Entity

APPROVEKEYRECOVER         = Key Recovery

APPROVEREVOCATION         = Revocation

AREYOUSUREAPPROVE         = Are you sure you want to approve this action?

AREYOUSUREREJECT          = Are you sure you want to reject this action?

CLITOOL                   = Command Line Tool

CURRENTSTATUS             = Current Status

ERROREXECUTINGREQUEST     = Error happened when executing request, see log for more details.

ERRORHAPPENDWHENAPPROVING = Error happened when approving request, see log for more details.

EVER                      = Ever

EXECUTED                  = Executed

EXECUTIONDENIED           = Execution Denied

EXECUTIONFAILED           = Execution Failed

EXPIREDANDNOTIFIED        = Expired and notified

EXPIREDATE                = Expire Date

MAXAPPROVALQUERYROWS1     = Large Query, Only the first

MAXAPPROVALQUERYROWS2     = rows are displayed.

NEWPASSWORD               = New Password

NOTSHOWN                  = Not Shown

NOVALUE                   = No Value

ORIGINALACTIONDATA        = Original Action Data

PARTITIONS_HIDDEN         = This step contains additional partitions which you are not authorized to view.

REJECT                    = Reject

REJECTED                  = Rejected

REMAININGAPPROVALS        = Remaining Approvals

REMAINING_APPROVALS_NONE  = Request has been executed.

REQALREADYPROCESSED       = Approval request has already been processed.

REQHASEXPIRED             = Approval request has expired.

REQHAVEBEENADDEDFORAPPR   = Request has been sent for approval.

RELATEDCA                 = Related CA

RELATEDEEPROFILE          = Related End Entity Profile

REQUESTEDACTIONDATA       = Requested Action Data

REQUESTINGADMIN           = Requesting Administrator

REQUESTDATE               = Request Date

REQUESTEDWITHIN           = requested within

APPROVAL_SAVE_STATE       = Save state

SET                       = Set

SET_ACTION                = Set Action

SEARCHFORACTION           = Search for action with status

SOMEWEREALREADYREVOKED    = Some of the requested objects were already revoked.

THEREALREADYEXISTSAPPROVAL= There already exists an approval request for specified user.

THEREALREADYEXISTSAPPOBJ  = There already exists an approval request for the specified object(s).

WAITING                   = Waiting


### Mostly Authorization Module

ACCESSRULES               = Access Rules

ADDROLE                   = Add Role

ADMINROLE                 = Administrator Role

ROLEEXISTS                = Role already exists.

ROLES                     = Administrator roles

APPROVEENDENTITYRULE      = Approve End Entities

AREYOUSURE                = Are you sure you want to delete this?

AUDITLOGRULES             = Audit Log Rules

AUDITOR                   = Auditor

AUTHORIZEDCAS             = Authorized CAs

AUTHORIZATION             = Authorization

AVAILABLERULES            = Available Rules

BACKTOROLES               = Back to Administrator Roles

CAACCESSRULES             = CA Access Rules

CAADMINISTRATOR           = CA Administrators

CertificateAuthenticationToken = X509

ApiKeyAuthenticationToken = API Key

CliAuthenticationToken    = CLI

CREATEENDENTITYRULE       = Create End Entities

CRYPTOTOKENACCESSRULES    = Crypto Token Access Rules

DELETEENDENTITYRULE       = Delete End Entities

DELETEROLE                = Delete Role

EDITENDENTITYRULE         = Edit End Entities

EDITACCESSRULES           = Edit Access Rules

EDITROLEMEMBERS           = Edit Members

ENDENTITYPROFILEACCESSR   = End Entity Profile Access Rules

ENDENTITYPROFILES         = End Entity Profiles

ENDENTITYPROFILESAVED     = End Entity Profile saved.

ENDENTITYRULES            = End Entity Rules

ENTERNEWNAME              = Enter new name

FORROLE                   = For administrator role:

HARDTOKENISSUER           = Hard Token Issuer

INTERNALKEYBINDINGRULES   = Internal Keybinding Rules

ISSUEHARDTOKENS           = Issue Hard Tokens

KEYRECOVERENDENTITYRULE   = Key Recover End Entities

LISTOFROLES               = Roles

MANAGEROLES               = Manage Administrator Roles

MATCHWITH                 = Match with

MATCHTYPE                 = Match Operator

MATCHVALUE                = Match Value

MATCHVALUEREQUIRED        = Match value required.

NOADMINSDEFINED           = No administrator defined.

OTHERRULES                = Other Rules

PEERMANAGEMENTRULES       = Peer Management Rules

PEERPROTOCOLRULES         = Peer RA Protocol Rules

PEERRARULES               = Peer RA Rules

RAADMINISTRATOR           = RA Administrators

REGULARACCESSRULES        = Regular Access Rules

RENAMEROLE                = Rename Role

RESOURCE                  = Resource

REVOKEENDENTITYRULE       = Revoke End Entities

ROLE                      = Role

ROLEBASEDACCESSRULES      = Role Based Access Rules

ROLEMEMBERS               = Members

ROLETEMPLATE              = Role Template

SELECTANOTHERROLE         = Custom Role access rules can be saved only in Advanced Mode. Please, go to Advanced Mode or choose another role.

SUPERADMINISTRATOR        = Super Administrators

SUPERVISOR                = Supervisors

TYPE_NONE                 = None

TYPE_EQUALCASE            = Equal, case sens.

TYPE_EQUALCASEINS         = Equal, case insens.

TYPE_NOT_EQUALCASE        = Not equal, case sens.

TYPE_NOT_EQUALCASEINS     = Not equal, case insens.

TYPE_UNUSED               = Not Used

VIEWACCESSRULES           = View Access Rules

VIEWAUDITLOG              = View Audit Log

VIEWENDENTITYRULE         = View End Entities

VIEWHARDTOKENRULE         = View Hard Tokens

VIEWHISTORYRULE           = View History

VIEWPUKENDENTITYRULE      = View Hard Token PUK Codes

VIEWROLES                 = View Administrator Roles

VIEWROLEMEMBERS           = View Role Members

#WITH_NONE                 = None

API_KEY                   = Key

WITH_COMMONNAME           = CN, Common name

WITH_COUNTRY              = C, Country

WITH_DNEMAILADDRESS       = E, E-mail address in DN

WITH_DNSERIALNUMBER       = serialNumber, Serial number in DN

WITH_DOMAINCOMPONENT      = DC, Domain Component

WITH_FULLDN               = With full DN

WITH_LOCALITY             = L, Locality

WITH_ORGANIZATION         = O, Organization

WITH_ORGANIZATIONALUNIT   = OU, Organizational Unit

WITH_RFC822NAME           = RFC 822 Name (e-mail address)

WITH_SERIALNUMBER         = Certificate serial number (Recommended)

WITH_STATEORPROVINCE      = ST, State or Province

WITH_TITLE                = title, Title

WITH_UID                  = UID, Unique ID

WITH_UPN                  = MS UPN, User Principal Name

USERDATASOURCEACCESSRULES = User Data Source Access Rules

TRANSPORT_ANY             = Any transport (HTTP or HTTPS)

TRANSPORT_PLAIN           = Non-confidential transport (HTTP)

TRANSPORT_CONFIDENTIAL    = Confidential transport (HTTPS)


### Mostly CA Module

ACTIVATE                  = Activate

ACTIVATECAS               = CA Activation

ACTIVATECAS_ACTION        = Action

ACTIVATECAS_ACTCODE       = Crypto Token activation code

ACTIVATECAS_FOOTNOTE      = Crypto Token State only applies to this server

ACTIVATECAS_HCHECK        = HealthCheck

ACTIVATECAS_KEEPACT       = Keep Active

ACTIVATECAS_MONITORED     = Monitored by

ACTIVATECAS_NAME          = Name

ACTIVATECAS_NA            = not available

ACTIVATECAS_STATE         = State

ACTIVATECAS_SACTION       = Service Action

ACTIVATECAS_SSTATE        = Service State

ACTIVATEKEYS              = Activate keys

ACTIVATEORMAKEOFFLINE     = Activate / Make off-line

ACTIVEDIRECTORYPUBLISHER  = Active Directory Publisher

ACCOUNTDISABLED           = Disabled Account

ACCOUNTNEVEREXPIRE        = Account Never Expires

ACCOUNTNORMAL             = Normal Account

ADDCA                     = Add CA

ADDPUBLISHER              = Add Publisher

ADSETTINGS                = Active Directory Settings

ALLOWDNOVERRIDECSR        = Allow Subject DN Override by CSR

ALLOWDNOVERRIDEEEI        = Allow Subject DN Override by End Entity Information

ALLOWCERTSERIALNUMBEROVERRIDE = Allow certificate serial number override

CERTSERIALNOUNIQUEIX      = No unique index for (issuerDN,serialNumber) on database table ‘CertificateData’. “Allow certificate serial number override” not allowed.

ALLOWEXTENSIONOVERRIDE    = Allow Extension Override

ALLOWKEYUSAGEOVERRIDE     = Allow Key Usage Override

ALLOWBACKDATEDREVOCATION  = Allow Backdated Revocation

ALPHANUMERIC              = alphanumeric [0-9][A-Z]

ANYCA                     = Any CA

AREYOUSUREACTIVATECA      = Are you sure you want to activate the CA?

AREYOUSURETODELETECA      = Are you sure you want to delete the CA {0}? You should revoke the CA instead if you already have used it to issue certificates.

AREYOUSUREMAKECAOFFLINE   = Are you sure you want to make the CA off-line?

AREYOUSURERENEWCA         = Are you sure you want to renew this CA?

AREYOUSUREREPUBLISH       = Are you sure you want to republish this certificate?

AREYOUSUREREVOKECA        = Are you sure you want to revoke this CA?

ARLATTRIBUTE              = ARL Attribute

AVAILABLEBITLENGTHS       = Available Bit Lengths

AVAILABLECAS              = Available CAs

AVAILABLEECDSACURVES      = Available ECDSA curves

AVAILABLEECDSABYBITS      = Any allowed by bit lengths

AVAILABLEKEYALGORITHMS    = Available Key Algorithms

AUTHENTICATIONCODE        = Authentication Code

AUTHENTICATIONCODERENEW   = Authentication code for renewing keys

AUTHENTICATIONCODEACTIVATE = Authentication code for activating keys

AUTHENTICATIONCODEAUTOACTIVATE = Enable auto-activation of CA token

AUTHENTICATIONERROR       = Authentication Error

BASEDN                    = Base DN

BASEDN_HELP               = (appended to location fields to form a LDAP DN)

BASICFUNCTIONS_TITLE      = Basic Functions

BASICFUNCTIONSFOR         = Basic Functions for CA

BACKTOCAS                 = Back to Certificate Authorities

BACKTOCERTIFICATEPROFILES = Back to Certificate Profiles

BACKTOPUBLISHERS          = Back to Publishers

CA                        = CA

CAACTIVATED               = Certificate Response received successfully, CA Activated

CAROLLOVERPENDING         = Certificate Response received successfully. Rollover certificate can be activated after:

CAACTIVATIONSUCCESSFUL    = CA Activation Successful.

CAACTIVATIONSENTAPPROVAL  = CA Activation request sent for approval.

CAACTIVATIONREQEXISTS     = Request for CA Activation already exists.

CAALREADY                 = CA already exists.

CACERTIFICATE             = CA Certificate

CACERTIFICATEATTR         = CA Certificate Attribute

CACERTIFICATEDATA         = CA Certificate Data

CADOESNTEXIST             = CA doesn’t exist in system.

CADATA                    = CA data

CAHEALTH                  = CA Status

CAID                      = CA ID

CAISNTACTIVE              = CA is not active

CALIFECYCLE               = CA Life Cycle

CANAME                    = CA Name

CAOBJECTCLASS             = CA Object Class

CACERTPUBLISHINGQUEUED    = CA Certificates Publishing Queued. Please verify that the length of the publisher queue will be 0.

CARENEWED                 = CA Renewed Successfully

CAREVOKED                 = CA is Revoked

CAROLLOVER                = CA Rollover

CAROLLOVERBUTTON          = Perform CA Rollover

CAROLLOVERNOTAFTER        = Current certificate valid to

CAROLLOVERNOTBEFORE       = Next certificate valid from

CASERVICE                 = CA Service

CASERVICE_ON              = Active

CASERVICE_ON_TITLE        = CA Service: Active

CASERVICE_OFF             = Off-line

CASERVICE_OFF_TITLE       = CA Service: Off-line

CASTATUS                  = CA Status

CASTRUCTUREANDCRL         = CA Structure & CRLs

CANBEENABLED              = Can be enabled in My Preferences

CATOKENAUTHFAILED         = Error: CA token authorization failed.

CATOKENISOFFLINE          = Error: CA token is off-line, Please activate the token before continuing.

INITCATOKENISOFFLINE      = Error: CA token is off-line. Have you created the keys in the CryptoToken after importing?

CATOKENSTATUS             = CA Token Status

CATOKENTYPE               = CA Token Type

CATYPE                    = CA Type

CERTIFICATE               = Certificate

CERTIFICATEGENERATED      = Certificate Generated

CERTIFICATEPROFILE        = Certificate Profile

CERTIFICATEPROFILEFIXED   = FIXED

CERTIFICATEPROFILEID      = Certificate Profile ID

CERTIFICATEPROFILENAME    = Name

CERTIFICATEPROFILEALREADY = Certificate profile already exists.

CERTPROFILENOTFOUND       = Error, certificate profile not found.

CERTPROFILEUSEDINCAS      = It exists in the following Certification Authorities:

CERTPROFILEUSEDINENDENTITIES = It exists in the following End Entities:

CERTPROFILEUSEDINENDENTITIESEXCESSIVE = It is used by some End Entities (results not shown, over 100 hits)

CERTPROFILEUSEDINENDENTITYPROFILES = It exists in the following End Entity Profiles:

CERTPROFILEUSEDINHARDTOKENPROFILES = It exists in the following Hard Token Profiles:

CERTPROFILEUSEDINSERVICES = It exists in the following services:

CERTREPUBLISHFAILED       = Unable to do direct publishing of the certificate. Either a queuing publisher is configured to be used or there was an error.

CERTREPUBLISHEDSUCCESS    = Certificate republished successfully.

CERTREQREPUBLISHFAILED    = No Certificate Profile ID was defined for this Certificate entry and no Certificate Request History could be found. 

CERTREQGEN                = Certificate Request Generated

CLASSPATH                 = Class Path

CONTESTEDSUCESSFULLY      = Connection Tested Successfully

COULDNTDELETECA           = Couldn’t delete CA, it’s still used by some users or in the profiles or roles.

COULDNTDELETECERTPROF     = Couldn’t delete certificate profile

COULDNTDELETEPUBLISHER    = Couldn’t delete publisher.

COUNTRYCODEPLUSALPHANUMERIC = country code followed by alphanumeric sequence

COUNTRYCODEPLUSNUMERIC    = country code followed by numeric sequence

CREATECA                  = Create CA

CREATECRL                 = Create CRL

CREATELINKCERT            = Create link certificate

CREATENEWCRL              = Create a new updated CRL

CREATENONEXISTINGUSERS    = Create Non-existing Users

CRLATTRIBUTE              = CRL Attribute

CRLSPECIFICDATA           = CRL Specific Data

CRLSTATUS                 = CRL Status

CRLSTATUS_ON              = Up to date

CRLSTATUS_ON_TITLE        = CRL Status: Up to date

CRLSTATUS_OFF             = Expired

CRLSTATUS_OFF_TITLE       = CRL Status: Expired

CRYPTOTOKEN_DEFAULTKEY    = – Default key

CRYPTOTOKEN_DOESNT_EXIST_CANT_INITIALIZE = You need to select a Crypto Token that exists before you can initialize!

CRYPTOTOKEN_DOESNT_EXIST_CANT_SAVE = You need to select a Crypto Token that exists before you can save!

CRYPTOTOKEN_NEWFROMCA     = – Create a new soft Crypto Token with recommended key pairs

CRYPTOTOKEN_NOSUITABLE    = No suitable Crypto Token available for this signature algorithm

CRYPTOTOKEN_USECERTSIGN   = Use same as Certificate Signing Key (certSignKey).

CUSTOMPUBLISHER           = Custom Publisher

CUSTOMPUBLISHERSETTINGS   = Custom Publisher Settings

NOCUSTOMPROPERTYUISUPPORT = No custom properties supported.

CREATEAUTHCSR             = Create Authenticated Certificate Signing Request

CREATEINTERMEDIATENODES   = Create intermediate nodes

CREATEDELTACRL            = Create Delta CRL

CREATENEWDELTACRL         = Create a new updated Delta CRL

CVCEPASSPORT              = ePassport

CVCTERMTYPE               = CVC terminal type

CVCINSPECTIONSYSTEM       = Inspection System

CVCAUTHENTICATIONTERMINAL = Authentication Terminal

CVCSIGNATURETERMINAL      = Signature Terminal

CVCSIGNTERMDVTYPE         = Signature Terminal DV role

CVCACCREDITATIONBODY      = Accreditation Body

CVCCERTIFICATIONSERVICEPROVIDER = Certification Service Provider

CVCCA                     = CVC CA

CVCACCESSRIGHTS           = CVC access rights

CVCACCESSDG3              = DG3 (fingerprint)

CVCACCESSDG4              = DG4 (iris)

CVCACCESSWRITEDG          = Write DG {0}

CVCACCESSREADDG           = Read DG {0}

CVCACCESSINSTALLQUALIFIEDCERT = Install Qualified Certificate

CVCACCESSINSTALLCERT      = Install Certificate

CVCACCESSPINMANAGEMENT    = PIN Management

CVCACCESSCANALLOWED       = CAN allowed

CVCACCESSPRIVILEGEDTERMINAL = Privileged Terminal

CVCACCESSRESTRICTEDIDENTIFICATION = Restricted Identification

CVCACCESSCOMMUNITYIDVERIFICATION = Community ID Verification

CVCACCESSAGEVERIFICATION  = Age Verification

CVCACCESSSIGN             = Generate Qualified Signature

CVCACCESSQUALSIGN         = Generate Signature

CVCCANOTAVAILABLE         = CVC CA type is available in EJBCA Enterprise.

CVCCANOTAVAILABLEUNIQUEINDEX = CVC CA type is not available because there is a unique (issuerDN, serialNumber) index in the database.

DEFAULT_VALIDATION_DATA   = Default CA defined validation data

DEFAULT_VALIDATION_DATA_HELP = Used as default values in certificate profiles using this CA

DELTACRLATTRIBUTE         = Delta CRL Attribute

DELTACRLSNOTENABLED       = Delta CRLs are not enabled.

GETDELTACRL               = Get Delta CRL

NODELTACRLHAVEBEENGENERATED = No Delta CRL have been generated.

DELETECA                  = Delete CA

DELETEPUBLISHER           = Delete Publisher

DELETEPUBLISHER_CONFIRM   = Confirm deletion

DCOCSHOULDBEDEFINED       = DC, O, ST and C fields should be defined in BaseDN

DIRECTIVES                = Directives

DISPLAYINGFIRSTTENRESULTS = Displaying first ten results of 

DOWNLOADIE                = Download binary/to IE

DOWNLOADNS                = Download to Firefox

DOWNLOADJKS               = Download JKS file

DOWNLOADPEM               = Download PEM file

DOWNLOADBINARY            = Download binary file

DOWNLOADPEMASPKCS7        = Download PEM file as PKCS7

EDITCA                    = Edit CA

EDITPUBLISHER             = Edit Publisher

ERRORCONNECTINGTOPUB      = Following error occurred when testing connection

ESTNOTAVAILABLE           = EST (RFC7030) protocol is available in EJBCA Enterprise.

ETSIVALUELIMCANNOTBEEMPTY = ETSI Value Limit fields can not be empty if used.

ETSIRETPERIODCANNOTBEEMPTY= ETSI Retention Period field can not be empty if used.

EXTERNALCA                = External CA

EXTERNALLYSIGNED_CA_CREATERENEW = Externally signed CA creation/renewal

EXTERNALLYSIGNED_CACERT   = Signed CA certificate

EXTERNALLYSIGNED_CACERT_HELP = (path to certificate signed by external CA)

EXTERNALLYSIGNED_CACHAIN  = CA chain certificates

EXTERNALLYSIGNED_CACHAIN_HELP = (path to PEM certificate chain or a single DER certificate from the CA that will sign the generated CSR. Upload it only if the signing CA is not installed locally as External CA) 

EXTERNALLYSIGNED_CAKEY    = Signed CA key

EXTERNALLYSIGNED_NEXTKEY  = Next CA key for CSR

EXTERNALLYSIGNED_FUTUREROLLOVER = Rollover certificate (activated later)

EXTERNALLYSIGNED_FUTUREROLLOVER_HELP = You can configure the “Roll Over Service” for automatic activation of rollover certificates.

EXTERNALLYSIGNED_STEP1    = Step 1 − Create CSR

EXTERNALLYSIGNED_STEP2    = Step 2 − Import Certificate

EXPIRED                   = Expired

EXPIRES                   = Expires

EXPORTCA                  = Export CA keystore

EXPORTCA_HEADER           = Export CA

EXPORTCA_NA               = This CA’s Crypto Token does not support and/or allow export.

EXPORTCA_AUTHCODE         = CA export requires the token authentication code

EXTSERVICESKEYSPEC        = Extended Services Key Specification

FINISHUSER                = Finish User

GETCRL                    = Get CRL

HARDCATOKENPROPERTIES     = Hard CA Token Properties

HOSTNAME                  = Hostname

HOSTNAMES                 = Hostnames

IMPORTCA_KEYSTORE         = Import CA keystore

IMPORTCA_CERTIFICATE      = Import CA certificate

IMPORTCA_CANAME           = The name this CA will be given

IMPORTCA_KEYSTOREFILE     = Full pathname of PKCS #12 file containing CA keys

IMPORTCA_KEYSTOREPASSWORD = Keystore password

IMPORTCA_CERTIFICATEFILE  = File containing full CA certificate chain in PEM format

IMPORTCA_SIGNKEYALIAS     = Alias of signature key

IMPORTCA_SIGNKEYALIAS_HELP= (optional: if only one key alias exists)

IMPORTCA_ENCKEYALIAS      = Alias of encryption key

IMPORTCA_ENCKEYALIAS_HELP = (optional: if not given, the key will be generated)

IMPORTCRL_TITLE           = Import CRL

IMPORTCRL_FUNCTION        = Import external CRL

IMPORTED_CA_RENEWAL       = Renewal

IMPORTED_CA_RENEWAL_NEWCERT_HELP = CA certificate chain in PEM format that will replace the currently imported CA certificate chain.

IMPORTED_CA_RENEWAL_NEWCERT = Import renewed CA certificates

INACTIVE                  = Inactive

INCLUDEINHEALTHCHECK      = Monitor if CA active (healthcheck)

INCORRECTMINMAXSCTS       = An incorrect number of SCTs was requested.

INCORRECTMINSCTS          = Minimum number of SCTs cannot be negative

INCORRECTMAXSCTS          = Maximum number of SCTs cannot be negative

INCORRECTNUMBEROFLABELS   = Minimum number of SCTs cannot be less than the number of selected labels.

INCORRECTNUMBEROFLABELSMAX = Maximum number of SCTs cannot be less than the number of selected labels.

INCORRECTMAXLESSTHANMIN   = Maximum number of SCTs cannot be less than minimum number of SCTs.

INVALIDPORTNUMBER         = Invalid port number

INVALIDSUBJECTDN          = Creation of CA failed, invalid Subject DN or Subject Alternative Name

INVALIDSIGORKEYALGPARAM   = Invalid parameters for the chosen signature algorithm and key type

INVALIDTIMEFORMAT         = Invalid time format

DOENFORCEUNIQUEPUBLICKEYS = Enforce unique public keys

DOENFORCEUNIQUEDN         = Enforce unique DN

DOENFORCEUNIQUESUBJECTDNSERIALNUMBER = Enforce unique Subject DN SerialNumber

JKSPASSWORD               = Enter the password to use for this JKS file

KEEPEXPIREDONCRL          = Keep expired certificates on CRL

KEYSEQUENCE               = Key sequence

KEYSEQUENCEFORMAT         = Key sequence format

KEYSIZEDSA                = DSA key size

KEYSIZERSA                = RSA key size

KEYSPEC                   = ECDSA key spec

LATESTCRL                 = Latest CRL

LATESTDELTACRL            = Latest Delta CRL

MULTIGROUPPUBLISHER       = Multi Group Publisher
MULTIGROUPPUBLISHERSETTINGS = Settings: Multi Group Publisher
AVAILABLEPUBLISHERS       = Available Publishers
PUBLISHERGROUPS           = Publisher groups
MULTIGROUPPUBLISHER_HELP  = Enter one publisher per line. Put a blank line between groups.
MULTIGROUPPUBLISHER_HELP2 = EJBCA will publish to one publisher in each group.

LDAPCLASSESATTRIBUTES     = Object classes & DN attributes

LDAPOPERATIONS            = LDAP operations

LDAPPUBLISHER             = LDAP V3 Publisher

LDAPSETTINGS              = LDAP Settings

LISTOFAPPROVALPROFILES    = List of Approval Profiles

LISTOFCAS                 = List of Certification Authorities

LISTOFCERTIFICATEPROFILES = List of Certificate Profiles

LISTOFPUBLISHERS          = List of Publishers

LOGINDN                   = Login DN

LOGINPWD                  = Login Password

MAKEOFFLINE               = Make off-line

MAKEOFFLINESUCCESSFUL     = CA off-Line successful.

MAKEREQUEST               = Make Certificate Request

MAKEREQUEST_FILEPATH      = Path to certificate chain about to sign CA

MANAGEAPPROVALPROFILES    = Manage Approval Profiles

MANAGECAS                 = Manage Certification Authorities

MANAGECERTIFICATEPROFILES = Manage Certificate Profiles

MANAGEPUBLISHERS          = Manage Publishers

MANUALCLASSPATH           = – Specify class path manually –

MODIFYEXISTINGUSERS       = Modify Existing Users

MODIFYEXISTINGATTRIBUTES  = Overwrite Existing Attributes

ADDNONEXISTINGATTRIBUTES  = Add Non-existing Attributes

MONITORIFCAACTIVE         = Monitor if CA active

MONITORED                 = Monitored

MULTIGROUPPUBLISHER       = Multi Group Publisher

MUSTSELECTATLEASTONEFIELD = You must select at least one DN field to match LDAP DN.

NOCACERTFILE              = No CA chain file available

NOCHANGE                  = No change

NOCRLHAVEBEENGENERATED    = No CRL have been generated.

NOCTLOGSSELECTED          = CT is enabled but no CT logs have been selected.

NOCTLABELSSELECTED        = CT is enabled but no CT labels have been selected.

NODEHOSTNAME              = Node hostname

NOPUBLISHERSDEFINED       = No publisher is defined for certificate.

NOTAUTHORIZEDTOVIEWCA     = Not authorized to view specified CA.

NUMBER                    = number

NUMERIC                   = numeric [0-9]

OCSPSERVICE               = OCSP service

OFFLINE                   = Off-line

OLDMANUALCLASSPATHELP     = * Old, manual (not auto-detected) class path. To allow manual entry of class paths, set web.manualclasspathsenabled in web.properties to true.

ONEAVAILABLEBITLENGTH     = At least one available bit length must be selected.

ONEAVAILABLEKEYALGORITHM  = At least one available key algorithm must be selected.

ONEQCSTATEMENTUSED        = With Qualified Certificates Statements enabled, at least one statement must be used.

ONLYDECINETSIRETPERIOD    = Only decimal numbers are allowed in ETSI Retention Period field.

ONLYDECINETSIVALUELIMIT   = Only decimal numbers are allowed in ETSI Value Limit Amount and Exponent fields.

ONLYDECNUMBERSINPATHLEN   = Only decimal numbers are allowed in Path Length Constraint field.

ONLYTHEPUBLICKEY          = Only the public key is used from the certificate request.

OTHERDATA                 = Other Data

OTHEREXTENSIONS           = Other Extensions

OVERRIDABLEOIDSEXTENSIONLIST = Overridable Extension OID list

NONOVERRIDABLEOIDSEXTENSIONLIST = Extension list is disallowed

CERT_OVERRIDABLE_EXTENSIONS_LISTS_HELP = (comma separated list of extension OIDs)

PATHLENCANNOTBEEMPTY      = Path Length Constraint field cannot be empty.

PERMISSIONS               = Permissions

PORT                      = Port

PROCESSREQUEST_FILEPATH   = Path to certificate request to sign

PROPERTIESOFCUSTOM        = Properties of Custom Publisher

PUBLISHER                 = Publisher

PUBLISHERALREADY          = Publisher already exists.

PUBLISHERS                = Publishers

PUBLISHERSETTINGS         = Settings

PUBLISHERTYPE             = Publisher Type

RENEWKEYS                 = Renew keys

REPUBLISH                 = Republish

REPUBLISHCA               = Republish CA Certificates

REASON                    = Reason

RECIEVEREQUEST            = Receive Certificate Response

RECIEVEREQUEST_FILEPATH   = Path to certificate signed by external CA

RECEIVE_IMPORT_RENEWAL    = Import

RENEWCA                   = Renew CA

RENEWCA_FROMLASTRENEWAL   = Link certificate (from last renewal)

RENEWCA_LINKCERTIFICATE   = Create link certificate

RENEWCA_NEXTCAKEY         = Next CA key

RENEWCA_USECANAMECHANGE   = Use CA Name Change

RENEWCA_NEW_SUBJECT_DN_ICAO = New Subject DN

RENEWCA_NOTAVAILABLE      = Not available

RENEWCA_USINGKEYSEQUENCE  = – Generate new key using KeySequence –

REVOKERENEWCMSCERT        = Revoke and Renew CMS Certificate

ROOTCA                    = Root CA

SAMACCOUNTNAME            = SAM Account Name

SAVEANDTESTCONNECTION     = Save and Test Connection

SELFSIGNED                = Self Signed

SERVERTIME                = Server time

SETUSERPASSWORD           = Set User Password

SHAREDCMPRASECRET         = CMP RA Authentication Secret

SIGNEDBY                  = Signed By

SIGNEDBYEXTERNALCA        = Signed By External CA

SIGNINGALGORITHM          = Signing Algorithm

SIGNREQUEST               = Sign Certificate Request

SINGLECERTCONSTRAINT      = Single Active Certificate Constraint

STORECERTIFICATEDATA      = Store Certificate Data

STORECERTIFICATEDATA_HELP = (see help for info on usage in combination with ‘Use Certificate Storage’)

STORESUBJECTALTNAME_STORE = Search enabled

STORESUBJECTALTNAME_HELP  = (search enabled SAN use more storage)

SOFT                      = Soft

SUBCA                     = Sub CA

SUBORDINATECA             = Subordinate CA, level

CONNECTIONTIMEOUT         = Connection timeout

READTIMEOUT               = Read timeout

STORETIMEOUT              = Store timeout

TYPE                      = Type

UNINITIALIZED             = Uninitialized

UPDATEDMONITORED          = Updated monitored

USECERTREQHISTORY         = Use Certificate Request History

USEUSERSTORAGE            = Use User Storage

USECERTIFICATESTORAGE     = Use Certificate Storage

USECERTIFICATESTORAGE_HELP = (use with caution)

ACCEPTREVOCATIONSNONEXISTINGENTRY         = Accept Revocations for Non-Existing Entries

USEAPPENDONLYTABLE                        = Use Append-Only Table

CERTIFICATEPROFILEFORNONEXISTING          = Default Certificate Profile for Non-Existing Entries 

USEDCERTEXTENSIONS        = Used Custom Certificate Extensions

USEFIELDSINDN             = LDAP location fields from certificate DN

USEFIELDSINDN_HELP        = (DC, O, ST and C fields should be defined in BaseDN)

USEPREVIOUSKEY            = Use previous key (if any exists)

USERACCOUNTCONTROL        = User Account Control

USERCERTIFICATEATTR       = User Certificate Attribute

USERDESCRIPTION           = User Description

USEROBJECTCLASS           = User Object Class

VIEWCA                    = View CA

PLAIN                     = Plaintext Connection

SSL                       = TLS Connection

STARTTLS                  = STARTTLS Extension

INVALIDPRIVKEYSTARTOFFSET = Invalid relative time for start offset of private key usage period.

INVALIDPRIVKEYPERIOD      = Invalid relative time for length of private key usage period.

INVALIDVALIDITYORCERTEND  = Invalid validity or certificate end time

INVALIDVALIDITY_PAST      = Validity may not be set to expire in the past.

INVALIDCERTVALIDITYOFFSET = Invalid validity offset.

INVALIDCRLEXPIREPERIOD    = Invalid relative time for CRL expire period.

INVALIDCRLISSUEINTERVAL   = Invalid relative time for CRL issue interval.

INVALIDCRLOVERLAPTIME     = Invalid relative time for CRL overlap time.

INVALIDDELTACRLPERIOD     = Invalid relative time for delta CRL period.

INVALIDNAMECONSTRAINT     = Invalid Name Constraint: {0}

INVALIDOCTETSIZE          = Invalid CA serial number octet size. Must be number between 4 and 20. 

NAMECONSTRAINTSNOTENABLED = Name Constraints are not enabled in the certificate profile. 

TOOMANYREQUIREDCTLOGS     = The number of required CT Log responses is greater than the number of enabled logs.

ALLOWVALIDITYOVERRIDE     = Allow Validity Override

VIEW_CACERTIFICATE_HEADING= CA Certificate

VIEW_CACERTIFICATE_TITLE  = View CA Certificate

VIEW_CAINFORMATION_HEADING= CA Information

VIEW_CAINFORMATION_TITLE  = View CA Information

VIEW_CERTIFICATE          = View Certificate

VIEW_CERTIFICATES_HEADING = View Certificates

VIEW_CERTIFICATES_TITLE   = View Certificates

VIEW_CMSCERTIFICATE       = View CMS Certificate

VIEW_CMSCERTIFICATE_TITLE = View Certificate of CMS Service

VIEW_INFORMATION          = View Information

VIEWPUBLISHER             = View Publisher

WAITINGFORCERTRESPONSE    = Waiting for Certificate Response

X509                      = X.509 CA

X509EXTENSIONS            = X.509v3 extensions

X509EXTENSIONS_USAGES     = Usages

X509EXTENSIONS_NAMES      = Names

X509EXTENSIONS_VALDATA    = Validation data

CMSCERTIFICATERENEWED     = CMS Certificate renewed successfully.

CMSSERVICE                = CMS Service

#YOUCANTADDFIXEDCERT       = It’s not possible to add a certificate profile beginning with “FIXED”.

#YOUCANTDELETEFIXEDCERT    = Fixed certificate profiles cannot be deleted.

YOUCANTEDITFIXEDCERTPROFS = Fixed certificate profiles cannot be edited, deleted or added.

YOUMUSTSELECT             = You must select a file to upload.

YOUMUSTSPECIFYCAID        = You must specify a CA ID parameter.


### Approval Profiles

APPROVALACTIONS         = Actions Requiring Approvals

APPROVAL_EXPIRATION_PERIOD = Approval Expiration Period

APPROVALPROFILE         = Approval Profile

APPROVAL_PROFILE_ADD_PARTITION = Add Partition

APPROVAL_PROFILE_ADD_STEP = Add Step

APPROVAL_PROFILE_ALREADY_EXISTS = Approval Profile of that name already exists.

APPROVAL_PROFILE_CURRENT_STEP = Current Step

APPROVAL_PROFILE_DELETE_PARTITION = Delete Partition

APPROVAL_PROFILE_PARTITION_NOTIFICATION_ADD = Add notification

APPROVAL_PROFILE_PARTITION_NOTIFICATION_REMOVE = Remove notification

APPROVAL_PROFILE_PARTITION_USER_NOTIFICATION_ADD = Add user notification

APPROVAL_PROFILE_PARTITION_USER_NOTIFICATION_REMOVE = Remove user notification

APPROVAL_PROFILE_DELETE_STEP = Delete Step

APPROVAL_PROFILE_EXECUTION_HELP = Approval will automatically execute after the final step has been approved.

APPROVAL_PROFILE_FIELD_ADD = Add Field

APPROVAL_PROFILE_FIELD_ADD_ROW = Add Row

APPROVAL_PROFILE_FIELD_REMOVE = Remove Field

APPROVAL_PROFILE_FIELD_REMOVE_ROW = Remove Row

APPROVAL_PROFILE_FIELD_EXISTS = Approval Profile field by that name already exists.

APPROVAL_PROFILE_FIELD_RADIO_LABEL = Radio Button Label

APPROVAL_PROFILE_FIELD_RADIO_EXISTS = Radio Button with that label already exists.

APPROVAL_PROFILE_FIELD_RADIO_NO_VALUES = Radio Button set has no rows. 

APPROVAL_PROFILE_STEPS = Approval Steps:

APPROVAL_PROFILE_PARTITION = Partition

APPROVAL_PROFILE_PARTITION_ACTION = Partitions Requiring Action

APPROVAL_PROFILE_PARTITION_PREVIOUS = Previous Partitions

APPROVAL_PROFILE_PARTITION_HIDDEN = Note that you may not be authorized to see all partitions, and that they may be hidden from view.

APPROVAL_PROFILE_STEP = Step

APPROVALPROFILE_FROMTEMPLATE = Template approval profile

APPROVALPROFILE_NAME    = Approval profile name

APPROVALPROFILE_NEWNAME = Name of new approval profile

APPROVALPROFILEID       = Approval Profile ID

APPROVALPROFILES        = Approval Profiles

APPROVALPROFILESAVED    = Approval Profile saved.

APPROVALPROFILETYPE     = Approval Profile Type

APPROVALPROFILETYPE_UPDATE = Update

APPROVALPROFILEUSEDINCAS = It exists in the following CAs: 

APPROVALPROFILEUSEDINCERTPROFILES = It exists in the following Certificate Profiles: 

APPROVEGENERATETOKENCERT = WS-Generate Token Certificate

APPROVEVIEWHARDTOKEN     = WS-View Hard Token

BACKTOAPPROVALPROFILES  = Back to Approval Profiles

COULDNTDELETEAPPROVALPROF = Could not delete Approval Profile: 

MAX_EXTENSION_TIME = Max Extension Time

MAX_EXTENSION_TIME_HELP = The maximum time an expired request may be extended for. Set to 0d to disallow request extension.

REQUEST_EXPIRATION_PERIOD = Request Expiration Period

SELF_APPROVE_EDIT = Allow Self Approved Request Editing

SELF_APPROVE_EDIT_HELP = Administrator will be able to edit requests without approval from an additional administrator.

#-- Approval Profile Implementations

APPROVAL_PROFILE_COMMON_NOTIFICATION_EMAIL_SENDER = Notification message email sender

APPROVAL_PROFILE_COMMON_NOTIFICATION_EMAIL_RECIPIENT = Notification message email recipient

APPROVAL_PROFILE_COMMON_NOTIFICATION_EMAIL_MSG_SUBJECT = Notification message subject

APPROVAL_PROFILE_COMMON_NOTIFICATION_EMAIL_MSG_BODY = Notification message body

APPROVAL_PROFILE_COMMON_USER_NOTIFICATION_EMAIL_SENDER = User notification message email sender

APPROVAL_PROFILE_COMMON_USER_NOTIFICATION_EMAIL_MSG_SUBJECT = User notification message subject

APPROVAL_PROFILE_COMMON_USER_NOTIFICATION_EMAIL_MSG_BODY = User notification message body

APPROVAL_PROFILE_ACCUMULATIVE_APPROVAL_NUMBER_OF_REQUIRED_APPROVALS = Number of Required Approvals

APPROVAL_PROFILE_PARTITIONED_APPROVAL_NAME = Name

APPROVAL_PROFILE_PARTITIONED_APPROVAL_ROLES_WITH_APPROVAL_RIGHTS = Roles which may approve this partition

APPROVAL_PROFILE_PARTITIONED_APPROVAL_ROLES_WITH_VIEW_RIGHTS = Roles which may view this partition


### Mostly Configuration Module

SYSTEMCONFIGURATION       = System Configuration

#-- Basic Configurations

APPLICATIONCACHES         = Application Caches

AUTOENROLLMENT_SCRIPT     = Script Based Autoenrollment

AUTOENROLLUSE             = Use Autoenrollment

AUTOENROLLUSE_HELP        = Activates automatic certificate enrollment for Microsoft systems. Insecure if the Autoenrollment servlet isn’t protected by a Kerberos authenticating Apache proxy.

AUTOENROLLCA              = Autoenrollment CA

AUTOENROLLCA_HELP         = The CA that will issue all auto-enrolled certificates.

AUTOENROLLSSLCONNECTION   = Secure DC Connection

AUTOENROLLSSLCONNECTION_HELP = Use a secure SSL connection to the Domain Controller.

AUTOENROLLADSERVER        = Domain Controller Server

AUTOENROLLADSERVER_HELP   = The Domain Controller server to fetch information from.

AUTOENROLLADPORT          = Domain Controller Server Port

AUTOENROLLADPORT_HELP     = Domain Controller server port. Enter ‘0’ to use the default port.

AUTOENROLLCONNECTIONDN    = Active Directory User DN

AUTOENROLLCONNECTIONDN_HELP = The DN of the user that can read information from Active Directory.

AUTOENROLLCONNECTIONPWD   = Active Directory User Password

AUTOENROLLCONNECTIONPWD_HELP = The password of the user that can read information from Active Directory.

AUTOENROLLBASEDNUSER      = Base DN

AUTOENROLLBASEDNUSER_HELP = Search every item under this structure when trying to find and retrieve a user’s information.

CERTIFICATECHAINORDER     = Certificate Chain ordering in the Public Web

CERTIFICATECHAINROOTFIRST = Root Certificate first

CERTIFICATECHAINROOTFIRST_HELP = Enable this checkbox to deliver certificate chains root first in the Public Web

CLEARALLCACHES            = Clear All Caches

CLEARALLCACHES_EXCLUDE_CRYPTOTOKEN_CACHE = Exclude Active Manually-Activated CryptoTokens

CLEARALLCACHES_HELP1      = Clear all the caches on all nodes. The following caches are cleared: Global Configuration Cache, CMP Configurations Cache, SCEP Configuration Cache, End Entity Profile Cache, Certificate Profile Cache, Authorization Cache, CA Cache, CryptoToken Cache, Publisher Cache, Internal KeyBinding Cache, OCSP Signer Cache, OCSP Extensions Cache, CT Caches and Certificate Store Cache.

CLEARALLCACHES_HELP2      = Note that after clearing the cache, if not excluded, all CryptoTokens that are manually activated will go off-line.

COMMANDLINEINTERFACE      = Command Line Interface

EXTERNALSCRIPTS           = External Scripts

DATABASE_CONFIGURATION    = Database Configuration

EJBCATITLE                = Title

EJBCATITLE_HELP           = The title of the site.

ENABLECLIACCESS           = Enable Command Line Interface Access

ENABLECLIACCESS_HELP      = Enable Super Administrator access from the local command line interface (CLI). Warning: Disabling this makes it impossible to use the CLI for any operation that requires administrator rights including renewing the Super Administrator certificate. Please, make sure to renew the administrator certificates using the Admin Web before they expire! Note: After changing this property you need to click the Clear All Caches button.

ENABLECLIDEFAULTUSER      = Enable Command Line Interface Default User

ENABLECLIDEFAULTUSER_HELP = Enable the default CLI user defined in ejbca.properties. Disabling this user will cause the Command Line Interface to require authentication for all CLI operations.

ENABLEEXTERNALSCRIPTS     = Enable External Script Access

ENABLEEXTERNALSCRIPTS_HELP = Enable EJBCA to call external scripts stored on the local server. If this feature is disabled, GeneralPurposeCustomPublisher and ExternalCommandCertificateValidator are disabled and neither are displayed in the UI nor invoked.

ENABLEENDENTITYPROFILELIM = Enable End Entity Profile Limitations

ENABLEENDENTITYPROFILELIM_HELP = Check this field if you want to use end entity access control.

ENABLEICAOCANAMECHANGE    = Enable CA Name Change

ENABLEKEYRECOVERY         = Enable Key Recovery

FOOTBANNER                = Foot Banner

FOOTBANNER_HELP           = The name of the foot banner JSP or HTML file. Must be put in the directory “banners”.

FORCELOCALKEYRECOVERY     = Force Local Key Generation

HARDTOKENENCRYPTCA        = Hard Token Data Encrypt CA

HARDTOKENENCRYPTCA_HELP   = The CA used to encrypt the sensitive Hard Token Data such as PUK codes.

HEADBANNER                = Head Banner

HEADBANNER_HELP           = The name of the head banner JSP or HTML file. Must be put in the directory “banners”.

ICAOSPECIFICOPTIONS       = ICAO Specific options

ISSUEHARDWARETOKENS       = Issue Hardware Tokens

ISSUEHARDWARETOKENS_HELP  = Check this field if it should be possible to issue hardware tokens.

MAXIMUM_QUERY_COUNT       = Maximum Query Count

MAXIMUM_QUERY_COUNT_HELP  = This number defines the maximum amount of rows that can be retrieved from the database in a single transaction.

MAXIMUM_QUERY_TIMEOUT     = Maximum Query Timeout

MAXIMUM_QUERY_TIMEOUT_HELP = This number defines the timeout in milliseconds for certain database queries. 0 means disabled. Requires JDBC and database support to work.

NODESINCLUSTER            = Nodes in Cluster

NODESINCLUSTER_HELP       = List of known node’s hostnames in this cluster. Nodes can be manually added or removed from the list.

NOENCRYPTION              = No encryption

#-- Administrator Preferences

DEFAULTADMINPREFERENCES   = Default Administrator Preferences

NUMBEROFRECORDSPERPAGE    = Number of Records per Page

NUMBEROFRECORDSPERPAGE_HELP = The number of records to be displayed on one page

PREFEREDLANGUAGE          = Preferred Language

PREFEREDLANGUAGE_HELP     = The default language to use in web pages.

SECONDARYLANGUAGE         = Secondary Language

SECONDARYLANGUAGE_HELP    = Language to use if no text is found in the preferred language.

THEME                     = Theme

THEME_HELP                = The administrators theme of font and colors, etc.

#-- Protocol Configuration

PC_EDIT_PC_TITLE            = Enable or disable protocol access

PC_VIEW_PC_TITLE            = Status of available protocols

PC_TABLE_PROTOCOL_TITLE     = Protocol

PC_TABLE_STATUS_TITLE       = Status

PC_TABLE_RESOURCE_URL       = Resource Default URL

PC_ACTION_ENABLE            = Enable

PC_ACTION_DISABLE           = Disable

PC_STATUS_DISABLED          = Disabled

PC_STATUS_ENABLED           = Enabled

PC_STATUS_UNAVAILABLE       = Unavailable

#-- Extended Key Usages

#-> See: X.509 Certificate and CRL > Extended Key Usage

#-- Certificate Transparency Logs (Enterprise only)

CONFIGURE_GOOGLES_CT_POLICY = Log Policy Based on Certificate Lifetime

SAVE_CT_POLICY              = Save CT policy

CT_NUMBER_OF_SCTS           = Number of SCTs From Distinct Logs

LESS_THAN_15_MONTHS         = < 15 Months

BETWEEN_15_AND_27_MONTHS    = ≥ 15 Months and ≤ 27 Months

BETWEEN_27_AND_39_MONTHS    = > 27 Months and ≤ 39 Months

MORE_THAN_39_MONTHS         = > 39 Months

CTLOGCONFIGURATION        = Certificate Transparency Logs

CTLOGCONFIGURATION_HELP   = These CT logs will be available in certificate profiles.

CTLOGCONFIGURATION_ADDTEXT = Add a new CT log

CTLOGCONFIGURATION_ADD_NEW = Add a New Certificate Transparency Log

CTLOGCONFIGURATION_KNOWN_LOGS = Known Certificate Transparency Logs (External Link)

CTLOGCONFIGURATION_EDIT_CTLOG_TITLE = Add or Remove Certificate Transparency Audit Logs

CTLOGCONFIGURATION_VIEW_CTLOG_TITLE = View Certificate Transparency Audit Logs

CTLOGCONFIGURATION_URL    = Log URL

CTLOGCONFIGURATION_PUBLICKEY = Public Key

CTLOGCONFIGURATION_PUBLICKEYFILE = PEM or DER/CRT file:

CTLOGCONFIGURATION_TIMEOUT = Timeout (ms)

CTLOGCONFIGURATION_EDITLOG = Edit CT Log

CTLOGCONFIGURATION_CURRENT_PUBLICKEY = Current Log Public Key ID

CTLOGCONFIGURATION_REPLACE_PUBLICKEY = Replace Public Key?

CTLOGCONFIGURATION_INVALID_YEAR = The expiration year must be a number.

CTLOGNOTFILLEDIN          = Both the CT ‘Log URL’ and ‘Public key’ must be filled in to add a log.

CTLOGINVALIDPUBLICKEY     = Invalid public key file.

CTLOGTAB_MISSINGPROTOCOL  = CT Log URL must specify a protocol: http:// or https://

CTLOGTAB_UPLOADFAILED     = Upload of CT Log public key file failed.

CTLOGTAB_TIMEOUTNEGATIVE  = Timeout value may not be negative.

CTLOGTAB_BADKEYFILE       = Cannot parse the public key file {0}. {1}

CTLOGTAB_GENERICADDERROR  = Cannot add CT Log. {0}

CTLOGTAB_ALREADYEXISTS    = A CT Log with that URL already exists: {0}

CTLOGTAB_INUSEBYPROFILES  = CT Log is still in use by the following Certificate Profiles and can’t be removed: {0}

INVALID_CT_POLICY = The CT policy contains one or more invalid values.

ACCEPTING_BASED_ON_YEAR_OF_EXPIRY = This log is only accepting certificates with a certain year of expiry

#-- Custom Certificate Extensions

CUSTOMCERTEXTENSION             = Custom Certificate Extension

CUSTOMCERTEXTENSION_CLASS       = Extension Class

CUSTOMCERTEXTENSION_CONF_DELETE = Are you sure you want to remove this Custom Extension?

CUSTOMCERTEXTENSION_CREATENEW   = Create new...

CUSTOMCERTEXTENSION_EDIT_CCE_TITLE = Add, remove, edit or view available Custom Certificate Extensions

CUSTOMCERTEXTENSION_NAV_BACK    = Back to Custom Certificate Extensions overview

CUSTOMCERTEXTENSION_NAV_EDIT    = Switch to edit mode

CUSTOMCERTEXTENSION_NEW         = New Custom Certificate Extension

CUSTOMCERTEXTENSION_VIEW_CCE_TITLE = View available Custom Certificate Extensions

# Basic Certificate Extension
CUSTOMCERTEXTENSION_PROPERTY_dynamic = Dynamic
CUSTOMCERTEXTENSION_PROPERTY_encoding = Encoding
CUSTOMCERTEXTENSION_PROPERTY_value = Value

# Basic CV Certificate Extension
CUSTOMCERTEXTENSION_PROPERTY_include_in_certs = Include in certificates
CUSTOMCERTEXTENSION_PROPERTY_include_in_csr = Include in CSR
CUSTOMCERTEXTENSION_PROPERTY_include_in_linkcerts = Include in link certificates
CUSTOMCERTEXTENSION_PROPERTY_rawdata = Arbitrary data (hexadecimal bytes)

#-- Custom RA Styles

COLUMNNAMETITLE           = Name

CSSCOLUMNTITLE            = Modified CSS

CSSIMPORTFROM             = Select CSS from Zip or single file:

CSSIMPORTIGNORED          = Imported {0} CSS file(s) successfully: {1}. Ignored {2} file(s): {3} (not recognized as .css file)

CSSIMPORTSUCCESS          = Imported {0} CSS file(s) successfully: {1}

CSS_CONFIRM_DELETE        = Are you sure you want to remove this RA Style?

CSS_LIST_TITLE            = List of Available RA Styles

CSS_NOT_AUTH              = You are not authorized to perform this operation.

ISNOTAZIPFILE             = Selected file is empty or not a zip / css file.

LOGOCOLUMNTITLE           = Logo

LOGOIMPORTFROM            = Select logo from image file:

LOGOIMPORTIGNORE          = {0} is not recognized as an image file. Supported file types: .jpg, .png

LOGOIMPORTSUCCESS         = Imported 1 logo file successfully: {0}

NOFILESELECTED            = No file selected for import.

STYLEIMPORTFAIL           = File import failed {0}

STYLENONAME               = No name specified for style archive.

STYLEEXISTS               = An RA Style with the name {0} already exists.

#-- Statedump (Enterprise only)

STATEDUMPTAB_TITLE        = Import Statedump ZIP File

STATEDUMPTAB_WARNING      = Warning! Importing a Statedump may cause existing data to be overwritten or modified.

STATEDUMPTAB_LOCALTEMPLATE = Option 1) Select local template:

STATEDUMPTAB_ZIPFILE      = Option 2) Select zip file:

STATEDUMPTAB_ZIPFILE_TOOLTIP = Select a Statedump ZIP file containing XML files

STATEDUMPTAB_LOCKDOWN     = Disable Statedump tab after import

STATEDUMPTAB_LOCKDOWN_CHECKBOX = Lock down

#-- Validator settings
EXTERNAL_SCRIPTS_WHITELIST            = Configure Scripts Whitelist
EXTERNAL_SCRIPTS_WHITELIST_HELP       = Specify the full path to one or more external programs, one external program per line, which are allowed to be executed by “External Command Validators”. Lines beginning with ‘#’ are treated as comments and are ignored.
USE_EXTERNAL_SCRIPTS_WHITELIST        = Use the whitelist below (any program not listed is not allowed to execute)
EXTERNAL_SCRIPTS_VALIDATE             = Validate
EXTERNAL_SCRIPTS_SAVED                = The Validator settings were saved successfully!
EXTERNAL_SCRIPTS_SAVE_FAILED          = The Validator settings could not be saved. One or more paths in the whitelist are invalid.
EXTERNAL_SCRIPTS_VALIDATION_FAILED    = Could not validate your whitelist. Error description: {0}

#-- My Preferences

ADMINISTRATORPREFERENCES  = Administrator Preferences

CASTATUSONHOMEPAGE        = CA Status on Front Page

CASTATUSONHOMEPAGE_HELP   = If CA status should be displayed on the front page

FORADMIN                  = For Administrator:

PUBLISHERQUEUESTATUSON    = Publisher Queue Status on Front Page

PUBLISHERQUEUESTATUSON_HELP = If publisher queue status should be displayed on the front page


### Mostly CMP Configuration

CMPADDALIAS               = Add Alias

CMPALIAS                  = CMP Alias

CMPALIASEXISTS            = Alias already exists.

CMPALLOWVERIFYPOPO        = RA Verify Proof-of-Possession

CMPALLOWVERIFYPOPO_HELP   = Allow to specify that the CA should not verify the Proof-of-Possession (because the RA is trusted).

CMPALLOWAUTOMATICKEYUPDATE= Automatic Key Update

CMPALLOWAUTOMATICKEYUPDATE_HELP = For a new certificate to be issued for an End Entity, the End Entity’s status has to be set to ‘NEW’. This option allows the user status to automatically set to ‘NEW’ when receiving a KeyUpdateRequest.

CMPALLOWKURWITHSAMEKEY    = Certificate renewal with same keys

CMPALLOWKURWITHSAMEKEY_HELP = Allow using the same old certificate keys when renewing a certificate.

CMPALLOWSERVERGENERATEDKEYS = Allow server generated keys

CMPALLOWSERVERGENERATEDKEYS_HELP = Allow the server to generate keys for the client when processing requests for server generated keys.

CMPAUTHENTICATIONMODULE   = CMP Authentication Module

CMPAUTHENTICATIONMODULE_HELP = Specify the module used to authenticate the CMP request.

CMPAUTHSUBJECTDNPART      = SubjectDN Part

CMPBACKTOALIASES          = Back to CMP Aliases

CMPCLIENTMODE             = Client Mode

CMPCONFIGURATIONALIAS     = CMP Configuration Alias

CMPCONFIGURATIONALIAS_HELP= The CMP configuration alias to be used.

CMPCONFIRMATIONMESSAGE    = Certificate Confirmation

CMPRESPONSECONFIGURATION  = Response Configuration

CMPCOULDNOTDELETEALIAS    = Failed to delete CMP alias.

CMPCOULDNOTRENAMEORCLONE  = Failed to rename or clone. The new alias already exists.

CMPECCISSUERCA            = Issuer CA

CMPERROREEPNOTFOUND       = Cannot find the configured End Entity profile. Maybe it has been removed recently. Please choose another profile.

CMPDEFAULTCA              = Default CA

CMPDEFAULTCA_HELP         = This CA will be used to sign the Certificate Confirmation Response message.

CMPDEFAULTCA_DISABLED     = (disabled)

CMPDELETEALIAS            = Delete CMP Alias

CMPDNPARTS                = DN Parts:

CMPEDITALIAS              = Edit CMP Alias

CMPEXTRCTUSERNAMECOMPONENT= Extract Username Component

CMPEXTRCTUSERNAMECOMPONENT_HELP = Defines which component from the DN should be used to look up username in EJBCA.

CMPEXTRCTUSERNAMECOMPONENT_HELP1 = Any DN attribute can be specified, e.g. CN, UID, etc. Default is to use the entire DN as username.

CMPEXTRCTUSERNAMECOMPONENT_HELP2 = If a username can not be extracted, or the End Entity is not found, the full DN is also matched to try to find the End Entity.

CMPHMACCASECRET           = CA Shared Secret

CMPHMACSPECIFYSECRET      = Specify Secret

CMPKEYUPDATEREQUEST       = Key Update Request

CMPLISTOFALIASES          = List of CMP Aliases

CMPMANAGEALIASES          = Manage CMP Aliases

CMPNESTEDMESSAGECONTENT   = Nested Message

CMPNOAUTHMODULE           = Please select at least one authentication module.

CMPOMITVERIFICATIONSINECC = Verifications in EndEntityCertificate Authentication Module

CMPOMITVERIFICATIONSINECC_HELP = When using EndEntityCertificate authentication module in RA mode, you can skip performing some verifications on the certificate attached in the extraCert field. Note that this can only be permitted if the CMP request was sent inside a CMP NestedMessage.

CMPOMITVERIFICATIONSINECC_HELP1 = Checking this box will skip verifying that the certificate attached in the extraCert field: exists in the database, is issued by the right CA, is active, is valid and that it belongs to an authorized administrator.

CMPOMITVERIFICATIONSINECC_HELP2 = (Strongly recommended to keep it unchecked)

CMPOPERATIONALMODE        = CMP Operational Mode

CMPOPERATIONALMODE_HELP   = Client mode means that the user must be a pre-registered End Entity while RA mode means that the user will be created in EJBCA when the CMP request comes.

CMPRAALLOWCUSTOMSERNO     = Custom Certificate Serial Number

CMPRAALLOWCUSTOMSERNO_HELP= Specify if the CMP service will look in the request for custom certificate serial number.

CMPRAALLOWCUSTOMSERNO_HELP1 = If this setting is allowed, a requested serial number can be passed in the non-standard field serialNumber in the CRMF certTemplate.

CMPRACANAME               = RA CA Name

CMPRACANAME_HELP          = Specify the CA to be used when adding users.

CMPRACANAME_HELP1         = Select ‘ProfileDefault’ to use the Default CA specified in the End Entity Profile.

CMPRACERTPROFILE          = RA Certificate Profile

CMPRACERTPROFILE_HELP     = Specify the Certificate Profile used to generate certificates.

CMPRACERTPROFILE_HELP1    = Select ‘ProfileDefault’ to use the Default Certificate Profile specified in the End Entity Profile.

CMPRAEEPROFILE            = RA End Entity Profile

CMPRAEEPROFILE_HELP       = Specify the End Entity Profile used to add users.

CMPRA_PROFILEDEFAULT      = Profile default

CMPRANAMEGENERATIONSCHEME = RA Name Generation Scheme

CMPRANAMEGENERATIONSCHEME_HELP = Specify which generation schema should be used.

CMPRANAMEGENERATIONSCHEME_HELP1 = DN Parts – will take a part of the request DN, and use it as the username (use the list to choose which parts). Several DN attributes can be specified to have fall-back, for example UID;SN;CN. First try UID, if it does not exist try SN, etc.

CMPRANAMEGENERATIONSCHEME_HELP2 = RANDOM – will generate a 12 character long random username.

CMPRANAMEGENERATIONSCHEME_HELP3 = FIXED – to have a fixed username specified in the text field.

CMPRANAMEGENERATIONSCHEME_HELP4 = If the constructed username already exists, the existing user will be modified and a new certificate will be issued for that user.

CMPRANAMEGENERATIONPOSTFIX= RA Name Generation Postfix

CMPRANAMEGENERATIONPOSTFIX_HELP = Specify a postfix to the generated username. ‘${RANDOM}’ can be used to have a 10 random chars as postfix.

CMPRANAMEGENERATIONPREFIX = RA Name Generation Prefix

CMPRANAMEGENERATIONPREFIX_HELP = Specify a prefix to the generated username. ‘${RANDOM}’ can be used to have a 10 random chars as prefix.

CMPRAMODE                 = RA Mode

CMPRAPASSWORDGENPARAMS    = Password Generation Parameter

CMPRAPASSWORDGENPARAMS_HELP = An internal random password is temporarily used during certificate generation. By setting this parameter, you can use a fixed password instead of a random one.

CMPRESPONSEPROTECTION     = CMP Response Protection

CMPRESPONSEPROTECTION_HELP= Specify the method used to authenticate the CMP response sent by EJBCA.

CMPSERVERGENKEYS          = Server Generated Keys

CMPTRUSTEDCERTPATH        = Trusted Certificates Path

CMPTRUSTEDCERTPATH_HELP   = The absolute path to the catalogue that contains the certificates used to verify the signature in a NestedMessage.

CMPUSEENTIREDNASUSERNAME  = Use entire request DN as username

CMPVENDORCERT             = Vendor Certificate Mode

CMPVENDORCERT_USE         = Use Vendor Certificate Mode

CMPVENDORCERT_USE_HELP    = Activate and specify the CAs for authentication by Vendor CA in the CMP request extraCerts field and the CAs returned to the client in the CMP response caPubs field (used when following 3GPP standard).

CMPVENDORCERT_USE_HELP1   = Recommendation: Keep unchecked if you do not know what it is.

CMPVENDORCERT_VENDORCAS   = List Of Vendor CAs

CMPVENDORCERT_VENDORCAS_HELP = The list of vendor CA certificates is added to the CMP request message ‘extraCert’ field.

CMPRESPONSECAPUBS         = CMP Response Additional CA certificates

CMPRESPONSECAPUBS_HELP    = Adds additional CA certificates to the CMP response ‘CertRepMessage.caPubs’ field (see RFC4210). The user certificates signing CA certificate is added automatically at index 0 (a duplicate in this list is removed).

PKIRESPONSEMESSAGE_EXTRACERTS = PKI Message Response Additional CA certificates

PKIRESPONSEMESSAGE_EXTRACERTS_HELP = Adds additional CA certificates to the PKI response message ‘PKIMessage.extraCerts’ field (see RFC4210). The CA certificate chain used to sign this message is added automatically at index 0 (duplicates in this list are removed).

CMP_VIEW_ALIAS            = View CMP Alias

CMP_VIEW_ALIASES          = View CMP Aliases

OMIT                      = Omit


### Mostly ACME Configuration

ACME_MANAGEALIASES        = Manage ACME Aliases

ACME_VIEW_ALIASES         = View Aliases 

ACME_LISTOFALIASES        = List of ACME Aliases

ACME_ALIAS                = Alias

ACME_ENTERNEWALIAS        = Enter new ACME alias

ACME_ALIAS_NAV_BACK       = Back to ACME alias overview

ACME_END_ENTITY_PROFILE   = End Entity Profile

ACME_MUST_HAVE_ONE_PROFILE = You must create at least one end entity profile before you can use ACME.

ACME_DEFAULT_CA_WILL_BE_USED = The Default CA and Default Certificate Profile in the end entity profile will be used to issue certificates.

ACME_PREAUTHORIZATION_ALLOWED   = Pre-Authorization Allowed

ACME_REQUIRE_EXTERNAL_ACCOUNT_BINDING   = Require External Account Binding

ACME_WILDCARD_CERTIFICATE_ISSUANCE_ALLOWED = Wildcard Certificate Issuance Allowed

ACME_WEBSITE_URL          = Site URL

ACME_TERMS_URL            = Terms of Service URL

ACME_TERMS_URL_REQUIRED    = Please enter Terms of Service URL

ACME_TERMS_APPROVAL        = Require client approval for Terms of Service changes

ACME_DNS_RESOLVER		  = DNS Resolver

ACME_DNS_PORT			  = DNS Port

ACME_USE_DNSSEC_VALIDATION = Validate DNSSEC

ACME_DNSSEC_TRUST_ANCHOR  = DNSSEC Trust Anchor

ACME_DEFAULT_CONFIG       = Default ACME configuration

ACME_REPLAY_NONCE_VALIDITY       = Replay-Nonce Validity Number

ACME_GLOBAL_CONFIGS      = Global ACME Configurations

ONLYNUMBERS_INNONCEVALIDITY = Only numbers are allowed in "Replay-Nonce Validity Number".


### Mostly SCEP Configuration

SCEP_ADD_ALIAS            = Add Alias

SCEP_ALIAS                = Alias

SCEP_ALIAS_NAV_BACK       = Back to SCEP alias overview

SCEP_CLIENT_CERTIFICATE_RENEWAL = Allow Client Certificate Renewal (Enterprise Edition):

SCEP_CLIENT_CERTIFICATE_RENEWAL_WITH_SAME_KEY = Allow Client Certificate Renewal using old key (Enterprise Edition):

SCEP_DEFAULT_CA           = Default CA

SCEP_DELETE_ALIAS         = Delete Alias

SCEP_ENTERNEWALIAS        = Enter new SCEP alias

SCEP_INCLUDE_CA           = Include CA certificate in response

SCEP_LISTOFALIASES        = List of SCEP Aliases

SCEP_MANAGEALIASES        = Manage SCEP Aliases

SCEP_MODE                 = Mode

SCEP_OPERATIONAL_MODE     = Operational mode

SCEP_RA_AUTH_PASSWORD     = RA authentication password

SCEP_RA_CA                = RA CA Name

SCEP_RA_CERT_PROFILE      = RA Certificate Profile

SCEP_RA_ENDENTITY_PROFILE = RA End Entity Profile

SCEP_RA_NAME_GEN_PARAMS   = RA name generation parameters

SCEP_RA_NAME_GEN_POSTFIX  = RA name generation postfix

SCEP_RA_NAME_GEN_PREFIX   = RA name generation prefix

SCEP_RA_NAME_GEN_SCHEME   = RA name generation scheme

SCEP_RENAME_ALIAS         = Rename Alias

SCEP_VIEW_ALIASES         = View Aliases 


### Mostly EST Configuration

ESTADDALIAS               = Add Alias

ESTALIAS                  = EST Alias

ESTALIASEXISTS            = Alias already exists.

ESTALLOWVERIFYPOPO        = RA Verify Proof-of-Possession

ESTALLOWVERIFYPOPO_HELP   = Allow to specify that the CA should not verify the Proof-of-Possession (because the RA is trusted).

ESTALLOWKURWITHSAMEKEY    = Certificate Renewal with Same Keys

ESTALLOWKURWITHSAMEKEY_HELP = Allow using the same old certificate keys when renewing a certificate.

ESTBACKTOALIASES          = Back to EST Aliases

ESTCONFIGURATIONALIAS     = EST Configuration Alias

ESTCONFIGURATIONALIAS_HELP= The EST configuration alias to be used.

ESTCOULDNOTDELETEALIAS    = Failed to delete EST alias.

ESTCOULDNOTRENAMEORCLONE  = Failed to rename or clone. The new alias already exists.

ESTERROREEPNOTFOUND       = Cannot find the configured End Entity profile. Maybe it has been removed recently. Please choose another profile.

ESTDEFAULTCA              = Default CA

ESTDEFAULTCA_HELP         = This CA will be used to sign the Certificate Confirmation Response message.

ESTDEFAULTCA_DISABLED     = (disabled)

ESTDELETEALIAS            = Delete EST Alias

ESTEDITALIAS              = Edit EST Alias

ESTREQUIRECERT            = Require Client Certificate
ESTREQUIRECERT_HELP       = EST client must authentication using a client certificate which is authorized to create certificates. Always required for renewal (reenroll).

ESTREQUIREUSERNAME        = Client Username
ESTREQUIREUSERNAME_HELP   = EST client must authenticate using the specified username. Leave empty for no username.  Will not be required for renewal (reenroll).

ESTREQUIREPASSWORD        = Client Password
ESTREQUIREPASSWORD_HELP   = EST client must authenticate using the specified password. Leave empty for no password. Will not be required for renewal (reenroll).

ESTLISTOFALIASES          = List of EST Aliases

ESTMANAGEALIASES          = Manage EST Aliases

ESTCERTPROFILE            = Certificate Profile

ESTCERTPROFILE_HELP       = Specify the Certificate Profile used to generate certificates.

ESTCERTPROFILE_HELP1      = Select ‘ProfileDefault’ to use the Default Certificate Profile specified in the End Entity Profile.

ESTEEPROFILE              = End Entity Profile

ESTEEPROFILE_HELP         = Specify the End Entity Profile used to add users.

ESTPROFILEDEFAULT         = Profile default

EST_VIEW_ALIAS            = View EST Alias

EST_VIEW_ALIASES          = View EST Aliases


### Mostly Hard Token Module

ASCIINUMERIC              = ASCII Numeric

ISO95641                  = ISO 9564-1

ADDISSUER                 = Add Issuer

ADRESSLABELSETTINGS       = Address Label Settings

ADRESSLABELTYPE           = Address Label Type

ALIAS                     = Alias

ALIASFIELDMUSTBEFILLED    = The issuer must have a ‘Alias’ value.

AREYOUSUREKEYRECTOKEN     = Are you sure you want to recover the encryption keys associated with this token?

AVAILABLEHARDTOKENPROFILES= Available Hard Token Profiles

ATLEASTONETOKENPROFILE    = At least one available hard token profile must be selected.

AUTHCERTIFICATE           = Authentication Certificate

AUTHENCCERTIFICATE        = Auth/Enc Certificate

AUTHENCPUK                = Auth/Enc PUK

AUTHPUK                   = Authentication PUK

BACKTOHARDTOKENISSUERS    = Back to Hard Token Issuers

BACKTOHARDTOKENPROFILES   = Back to Hard Token Profiles

BASICPUK                  = Basic PUK

CERTIFICATESREWRITABLE    = Certificates Rewritable

CERTIFICATESETTINGS       = Certificate Settings

COULDNTDELETEISSUER       = Couldn’t delete hard token issuer, be sure you have deleted all end entities using specified issuer.

COULDNTDELETEHARDTOKENPROF= Couldn’t delete hard token profile, be sure you have deleted all end entities using specified issuer.

CURRENTTEMPLATE           = Current Template

EDITHARDTOKENISSUER       = Edit Hard Token Issuer

EDITHARDTOKENPROF         = Edit Hard Token Profile

ENCCERTIFICATE            = Encryption Certificate

ENCKEYRECOVERABLE         = Encryption Key Recoverable

ENHANCEDEID               = Enhanced eID

DELETEISSUER              = Delete Issuer

DELETEHARDTOKENPROF       = Delete Profile

ENVELOPETYPE              = Envelope Type

EREASABLE                 = Erasable Token

FOLLOWINGCOPIESHAVEBEEN   = Following copies exists

GENERALENVELOPE           = General Envelope

GENERALLABEL              = General Label

GENERALCARDPRINTER        = General Card Printer

GENERALRECEIPT            = General Receipt

GENERALSETTINGS           = General Settings

INITIALAUTHENCPIN         = Initial Auth/Enc PIN

INITIALAUTHPIN            = Initial Authentication PIN

INITIALBASICPIN           = Initial Basic PIN

INITIALPIN                = Initial PIN

INITIALSIGNATUREPIN       = Initial Signature PIN

ISSUERALREADYEXISTS       = Hard Token Issuer already exists. Try with other alias.

HARDTOKENDOESNTEXIST      = Hard Token haven’t been created for this end entity.

HARDTOKENISSUERALIAS      = Hard Token Issuer Alias

HARDTOKENNR               = Hard Token Number

HARDTOKENPROFILE          = Hard Token Profile

HARDTOKENPROFILEALREADY   = Hard Token Profile Already Exists

HARDTOKENPROFILEMALFORMED = Hard Token Profile contained bad SVG data, not saved.

HARDTOKENSN               = Hard Token SN

HARDTOKENSNMUSTBESIX      = Hard Token Serial Number Prefix field must have six digits.

HARDTOKENSNPREFIX         = Hard Token Serial Number Prefix

HARDTOKENTYPE             = Hard Token Type

LABEL_PROJECTCARD         = Project Card

LABEL_REGULARCARD         = Regular Card

LABEL_TEMPORARYCARD       = Temporary Card

LISTOFHARDTOKENISSUERS    = List of Hard Token Issuers

LISTOFHARDTOKENPROFILES   = List of Hard Token Profiles

MANAGEHARDTOKENISSUERS    = Manage Hard Token Issuers

MANAGEHARDTOKENPROFILES   = Manage Hard Token Profiles

MINIMUMOF                 = Minimum of

MINKEYLENGTH              = Minimum Key Lengths

NOAUTHORIZEDROLES         = – No authorized roles –

NOCOPIESHAVEBEENMADE      = No copies have been made

NOTAUTHORIZEDTOVIEWTOKEN  = You are not authorized to view specified user’s hard tokens.

NUMBEROFCOPIES            = Number Of Tokens with Same Enc Key

NUMOFADRESSLABELCOPIES    = Number of Address Labels

NUMOFPINENVCOPIES         = Number of PIN Envelope Copies

NUMOFRECEIPTCOPIES        = Number of Receipts

ONEISSUERMUSTBESELECTED   = One issuer must be selected in order to rename or use as template.

ONLYCHARACTERSINALIAS     = Only characters and numbers are allowed in Alias field.

ONLYDIGITSINHARDTOKENSN   = Only digits are allowed in Hard Token SN Prefix field.

ONLYDIGITSINVISUALVALIDITY= Only digits are allowed in Visual Validity field.

ONLYHEXINCERTSN           = Only hexadecimal values are allowed in Certificate Serial Number field.

ORIGINALCOPYOF            = Original / Copy of

PATHTOTEMPLATE            = Path to template (Must be in SVG format, max 2 MB)

PINENVELOPESETTINGS       = PIN Envelope Settings

PINTYPE                   = PIN Type

PUK                       = PUK

RECEIPTSETTINGS           = Receipt Settings

RECEIPTTYPE               = Receipt Type

REUSEOLDCERTIFICATE       = Reuse old certificate

RSA1024BIT                = RSA 1024 Bit

RSA1536BIT                = RSA 1536 Bit

RSA2048BIT                = RSA 2048 Bit

SAMEASSIGNCERT            = Same PIN Code as Signing Certificate

SAMEASAUTHCERT            = Same PIN Code as Authentication Certificate

SIGNATUREPUK              = Signature PUK

SIGNINGCERTIFICATE        = Signing Certificate

SWEDISHEID                = Swedish eID

TEMPLATEUPLOADFAILED      = File upload failed, are you sure it’s SVG format and less than 2 MB in size.

TEMPLATEUPLOADSUCCESSFUL  = Template uploaded successfully.

THISISACOPYOF             = This is a copy of token

THISISANORIGINAL          = This is an original

TURKISHEID                = Turkish eID

VIEW_HARDTOKENS_HEADING   = View Hard Tokens

VISUALLAYOUTSETTINGS      = Visual Layout Settings

VISUALVALCANNOTBEEMPTY    = Visual Validity field cannot be empty.

VISUALVALIDITY            = Visual Validity

UPLOADADRESSLABELTEMP     = Upload Address Label Template

UPLOADENVELOPETEMP        = Upload PIN Envelope Template

UPLOADTEMPLATE            = Upload Template

UPLOADRECEIPTTEMP         = Upload Receipt Template

UPLOADVISUALTEMP          = Upload Visual Layout Template

USEIDENTICALPINS          = Use Identical PINs

USEUSERDEFINED            = Use user defined

UTF8                      = UTF-8

YOUMUSTSPECIFYPARAMETER   = You must specify either a “username” or (“tokensn” and “username”) parameter.


### Audit Log Module

ACCESSCONTROL             = Access Control
ADMINWEB                  = Administration Web
APPROVAL_PROFILE          = Approval Profile
AUTHENTICATION            = Authentication
BLACKLIST                 = Blacklist
CERTIFICATE_AUTHORITY     = Certificate Authority
CRL                       = Certificate Revocation List
GLOBALCONF                = Global Configuration
KEY_MANAGEMENT            = Key Management
KEYRECOVERY               = Key Recovery
RA                        = Registration Authority
RECOVERY                  = Recovery
ROLES                     = Roles
SECURITY_AUDIT            = Security Audit
SERVICE                   = Service
TRUSTED_TIME              = Trusted Time

### Audit Log Event Statuses

FAILURE                   = Failure
SUCCESS                   = Success
VOID                      = Void

### Audit Log Events

#-- EventTypes from EJBCA
PUBLISHER_CHANGE          = Publisher Change
PUBLISHER_CLONE           = Publisher Clone
PUBLISHER_CREATION        = Publisher Create
PUBLISHER_REMOVAL         = Publisher Remove
PUBLISHER_RENAME          = Publisher Rename
PUBLISHER_STORE_CERTIFICATE = Publisher Certificate Store
PUBLISHER_STORE_CRL       = Publisher CRL Store
PUBLISHER_TEST_CONNECTION = Publisher Connection Test
CA_SIGNCMS                = Sign CMS
CA_SIGNREQUEST            = CA Signing Request
CA_RENEWED                = CA Renewal
CA_REVOKED                = CA Revoke
CA_IMPORT                 = CA Import
CA_EXPORTTOKEN            = CA Token Export
CA_REMOVETOKEN            = CA Token Remove
CA_RESTORETOKEN           = CA Token Restore
CA_VALIDITY               = CA Validity
CA_USERAUTH               = Public Web User Authentication
CA_EXTENDEDSERVICE        = CA Extended Service Executed
RA_ADDENDENTITY           = End Entity Add
RA_EDITENDENTITY          = End Entity Edit
RA_DELETEENDENTITY        = End Entity Remove
RA_REVOKEDENDENTITY       = End Entity Revoke
RA_ADDEEPROFILE           = End Entity Profile Add
RA_EDITEEPROFILE          = End Entity Profile Edit
RA_REMOVEEEPROFILE        = End Entity Profile Remove
RA_RENAMEEEPROFILE        = End Entity Profile Rename
RA_ADDADMINPREF           = Admin Preferences Add
RA_DEFAULTADMINPREF       = Admin Preferences Default
RA_EDITADMINPREF          = Admin Preferences Edit
RA_USERDATASOURCEFETCHDATA = User Data Source Data Fetch
RA_USERDATASOURCEREMOVEDATA = User Data Source Data Remove
RA_USERDATASOURCEADD      = User Data Source Add
RA_USERDATASOURCEEDIT     = User Data Source Edit
RA_USERDATASOURCEREMOVE   = User Data Source Remove
RA_USERDATASOURCERENAME   = User Data Source Rename
REVOKE_UNREVOKEPUBLISH    = Certificate Unrevoked Status Publish
CUSTOMLOG_ERROR           = Custom Log Error
CUSTOMLOG_INFO            = Custom Log Info
HARDTOKEN_GENERATE        = Hard Token Generate
HARDTOKEN_ADD             = Hard Token Add
HARDTOKEN_EDIT            = Hard Token Edit
HARDTOKEN_REMOVE          = Hard Token Remove
HARDTOKEN_VIEWED          = Hard Token View
HARDTOKEN_VIEWEDPUK       = Hard Token View PUK
HARDTOKEN_ADDPROFILE      = Hard Token Profile Add
HARDTOKEN_EDITPROFILE     = Hard Token Profile Edit
HARDTOKEN_REMOVEPROFILE   = Hard Token Profile Remove
HARDTOKEN_ADDISSUER       = Hard Token Issuer Add
HARDTOKEN_REMOVEISSUER    = Hard Token Issuer Remove
HARDTOKEN_EDITISSUER      = Hard Token Issuer Edit
HARDTOKEN_ADDCERTMAP      = Hard Token Certificate Map Add
HARDTOKEN_REMOVECERTMAP   = Hard Token Certificate Map Remove
KEYRECOVERY_SENT          = Key Recovery Send
KEYRECOVERY_MARKED        = Key Recovery Mark
KEYRECOVERY_ADDDATA       = Key Recovery Data Add
KEYRECOVERY_EDITDATA      = Key Recovery Data Edit
KEYRECOVERY_REMOVEDATA    = Key Recovery Data Remove
APPROVAL_ADD              = Approval Request Add
APPROVAL_EDIT             = Approval Request Edit
APPROVAL_REMOVE           = Approval Request Remove
APPROVAL_APPROVE          = Approval Request Approve
APPROVAL_REJECT           = Approval Request Reject
APPROVAL_EXTEND           = Approval Request Extend
APPROVAL_PROFILE_ADD      = Approval Profile Add
APPROVAL_PROFILE_EDIT     = Approval Profile Edit
APPROVAL_PROFILE_REMOVE   = Approval Profile Remove
APPROVAL_PROFILE_RENAME   = Approval Profile Rename
SYSTEMCONF_EDIT           = System Configuration Edit
SYSTEMCONF_CREATE         = System Configuration Create
SERVICE_ADD               = Service Add
SERVICE_REMOVE            = Service Remove
SERVICE_EDIT              = Service Edit
SERVICE_RENAME            = Service Rename
SERVICE_EXECUTED          = Service Execution
ADMINWEB_ADMINISTRATORLOGGEDIN = Administrator Log-In
EJBCA_STARTING            = EJBCA Node Start

#-- EventTypes from CESeCore
ACCESS_CONTROL            = Access Control
#AUTHENTICATION            = 
CA_CREATION               = CA Create
CA_DELETION               = CA Remove
CA_RENAMING               = CA Rename
CA_EDITING                = CA Edit
CA_KEYGEN                 = CA Key Generate
CA_KEYACTIVATE            = CA Key Activate
CA_KEYDELETE              = CA Key Remove
CA_ROLLEDOVER             = CA Rolled Over
CA_SERVICEACTIVATE        = CA Service Activate
CA_SERVICEDEACTIVATE      = CA Service Deactivate
CA_TOKENACTIVATE          = CA Token Activate
CA_TOKENDEACTIVATE        = CA Token Deactivate
CERT_STORED               = Certificate Store
CERT_REVOKED              = Certificate Revoke
CERT_CHANGEDSTATUS        = Certificate Status Change
CERT_REQUEST              = Certificate Request
CERT_CREATION             = Certificate Create
CERT_CTPRECERT_SUBMISSION = Certificate CT Pre-Cert Submission
#CERTIFICATE_KEY_BIND      = 
#CERTIFICATE_KEY_UNBIND    = 
CERTPROFILE_CREATION      = Certificate Profile Create
CERTPROFILE_DELETION      = Certificate Profile Remove
CERTPROFILE_RENAMING      = Certificate Profile Rename
CERTPROFILE_EDITING       = Certificate Profile Edit
CRL_STORED                = CRL Store
CRL_DELETED               = CRL Remove
CRL_CREATION              = CRL Create
CRYPTOTOKEN_ACTIVATION    = Crypto Token Activate
CRYPTOTOKEN_CREATE        = Crypto Token Create
CRYPTOTOKEN_DEACTIVATION  = Crypto Token Deactivate
CRYPTOTOKEN_REACTIVATION  = Crypto Token Reactivate
CRYPTOTOKEN_DELETE_ENTRY  = Crypto Token Entry Remove
CRYPTOTOKEN_DELETION      = Crypto Token Remove
CRYPTOTOKEN_EDIT          = Crypto Token Edit
CRYPTOTOKEN_GEN_KEYPAIR   = Crypto Token Key Pair Generate
CRYPTOTOKEN_GEN_KEY       = Crypto Token Key Generate
CRYPTOTOKEN_GEN_EXTRACT_KEYPAIR = Crypto Token Key Pair Extract
CRYPTOTOKEN_UPDATEPIN     = Crypto Token PIN Code Update
INTERNALKEYBINDING_CREATE = Internal Key Binding Create
INTERNALKEYBINDING_EDIT   = Internal Key Binding Edit
INTERNALKEYBINDING_DELETE = Internal Key Binding Remove
LOG_DELETE                = Audit Log Remove
LOG_EXPORT                = Audit Log Export
LOG_MANAGEMENT_CHANGE     = Audit Log Configuration
LOG_SIGN                  = Audit Log Sign
LOG_VERIFY                = Audit Log Verify
ROLE_CREATION             = Role Create
ROLE_DELETION             = Role Remove
ROLE_RENAMING             = Role Rename
ROLE_ACCESS_RULE_ADDITION = Role Access Rule Add
ROLE_ACCESS_RULE_CHANGE   = Role Access Rule Change
ROLE_ACCESS_RULE_DELETION = Role Access Rule Remove
ROLE_ACCESS_USER_ADDITION = Role Access User Add
ROLE_ACCESS_USER_CHANGE   = Role Access User Change
ROLE_ACCESS_USER_DELETION = Role Access User Remove
#BACKUP                    = 
#RESTORE                   = 
#TIME_SYNC_ACQUIRE         = 
#TIME_SYNC_LOST            = 
#EVENT_INFO_DATABASE                           = Database Information
#EVENT_INFO_EDITLOGCONFIGURATION               = Log Configuration Edited
#EVENT_INFO_GETLASTCRL                         = Last CRL Retrieved
#EVENT_INFO_HARDTOKENDATA                      = Hard Token Data Edited
#EVENT_INFO_HARDTOKEN_USERDATASENT             = Hard Token User Data Sent
#EVENT_INFO_PUBLICWEBUSERCONNECTED             = Public Web User Connected
#EVENT_INFO_USERAUTHENTICATION                 = Public Web User Authentication
#EVENT_INFO_NOTIFICATION                       = Notification
#EVENT_INFO_UNKNOWN                            = Unknown Event
#EVENT_INFO_SIGNEDREQUEST                      = Certificate request signed
#EVENT_INFO_REQUESTCERTIFICATE                 = Received certificate request
#EVENT_SYSTEM_INITILIZED_LOGGING               = EJBCA instance started log
#EVENT_SYSTEM_STOPPED_LOGGING                  = EJBCA instance stopped log

### Audit Log Columns

ADDITIONAL_DETAILS        = Details
ADMINISTRATOR             = Administrator
#CERTIFICATE               =
CUSTOM_ID                 = Certificate Authority
EVENTSTATUS               = Outcome
EVENTTYPE                 = Event
MODULE                    = Module
NODE                      = Node
TIMESTAMP                 = Time
#USERNAME_ABBR             = 


### Mostly Audit Module

AUDIT_AUTORELOAD          = Automatic reload when conditions change
AUDIT_DISPRESULTS         = Displaying results
AUDIT_DISPRESULTSTO       = to
AUDIT_DOWNLOAD            = Download shown results
AUDIT_DOWNLOADASCMS       = Download shown results as CMS
AUDIT_DOWNLOADASCMSCA     = CMS signing CA
AUDIT_SEARCHRESULTS       = Search results

AUDITHEADER               = Audit Log

NO_SEARCHABLE_AUDIT       = No audit log devices that can be searched are in use

APPROVAL                  = Approval

15MIN                     = 15 minutes

1DAY                      = 1 day

1HOUR                     = 1 hour

6HOURS                    = 6 hours

7DAYS                     = 7 days

ADMINTYPE                 = Admin Type

BATCHCMDLINE              = Batch commandline tool

CACMDLINE                 = CA commandline tool

CLIENTCERT                = Auth. with Client Cert.

COLUMN                    = Column

CONDITION                 = Condition

CONDITIONS_NEW            = Add...

CONDITIONS_CLEAR          = Clear all conditions

CONDITIONS_CLEAR_RELOAD   = Clear all conditions and reload

CONDITIONS_CURRENT        = Current conditions

CUSTOM                    = Custom

ENTRIESPERPAGE            = Entries per page

FIRST                     = First

INTERNALCA                = No CA Specified

INTERNALUSER              = Internal user

LOG                       = Log

MATCHADMINCERT            = Admin. Cert (hexadecimal serial number)

MATCHADMINIP              = Administrator IP address

MATCHADMINTYPE            = Administrator Type

MATCHCA                   = CA

MATCHCERTIFICATE          = Certificate (hexadecimal serial number)

MATCHCOMMENT              = Comment

MATCHEVENT                = Event

MATCHMODULE               = Module

MATCHUSERNAME             = Username

PUBLICWEBUSER             = Public web user

RACMDLINE                 = RA user

UNKNOWNCAID               = Unknown CA Identifier

VALUE                     = Value


### Mostly RA Module

ADDDATASOURCE             = Add Data Source

ADDEDSUCCESSFULLY         = added successfully.

ADDENDENTITY              = Add End Entity

ADDPROFILE                = Add Profile

ADVANCEDMODE              = Advanced Mode

ADEFAULTCA                = Default CA must be among available CAs.

ADEFAULTCERTPROFILE       = Default certificate profile must be among available certificate profiles.

ADEFAULTHARDTOKENISSUER   = A default hard token issuer must be selected.

ALLOWEDREQUESTS           = Number of allowed requests

ALLOWMERGEDNWEBSERVICES   = Allow merge DN Web Services

APPLICABLECAS             = Applicable CAs

AREVOKEATIONREASON        = A revocation reason must be selected.

AREYOUSUREDELETE          = Are you sure you want to delete selected end entities?

AREYOUSUREDELETEREVOKE    = Are you sure you want to revoke and delete the selected users?

AREYOUSUREKEYRECOVER      = Are you sure you want to recover keys associated with this certificate? Remember to set the password for the user in the section “Search End Entities”, then “Edit End Entity”.

AREYOUSUREREVOKE          = Are you sure you want to revoke selected end entities?

AREYOUSUREREVOKECERT      = Are you sure you want to revoke current certificate?

AREYOUSUREUNREVOKECERT    = Are you sure you want to reactivate current certificate?

AREYOUSUREREVOKETOKEN     = Are you sure you want to revoke current token?

AREYOUSURECHANGE          = Are you sure you want to change status on selected end entities?

ADMINROLESUSINGPROFILE    = Administrator roles using the profile:

AUTOGENERATED             = Auto-generated

AVAILABLECERTIFICATEPROF  = Available Certificate Profiles

AVAILABLEHARDTOKENISSUERS = Available Hard Token Issuers

AVAILABLETOKENS           = Available Tokens

BACKTOENDENTITYPROFILES   = Back to End Entity Profiles

BACKTOUSERDATASOURCES     = Back to User Data Sources

BASICMODE                 = Basic Mode

BEGINSWITH                = Begins with

CAMUST                    = A CA must be selected.

CANNOTVIEWUSERPROFREM     = Cannot view user data, the end entity profile have been removed.

CARDNUMBER                = Card number

CARDNUMBER_MUSTBE         = Card number must be decimal numbers.

CERTIFICATEDOESNTEXIST    = Certificate specified doesn’t exist in database, it may not have been generated.

CERTIFICATENR             = Certificate number

CERTIFICATEPROFILEMUST    = Certificate Profile must be selected.

CERTIFICATEPROFILESAVED   = Certificate Profile saved.

CERTIFICATEREQUESTDATA    = Certificate Request data

CERTIFICATES              = Certificates

CERTPROFILE_FROMTEMPLATE  = Template certificate profile

CERTPROFILE_NEWNAME       = Name of new certificate profile

CHANGESTATUSTO            = Change Status to:

CLEARTEXTPASSWORD         = Clear text password

CONFIRMPASSWORD           = Confirm Password

COULDNTDELETEEEPROFILE    = Couldn’t delete profile, it’s still used by some end entities or in the authorization rules.

COULDNTDELETEUSERDATASOURCE = Couldn’t delete user data source, it’s still used by some of the profiles.

COULDNOTFINDALLOBJECTS    = Could not find all the requested objects.

CSR                       = CSR file

CREATED                   = Created

CURRENTUSERDATA           = Current End Entity Data

CUSTOMUSERDATASOURCE      = Custom User Data Source

CUSTOMUSERDATASOURCESETTINGS = Custom User Data Source Settings

DEFAULTCA                 = Default CA

DEFAULTCERTIFICATEPROFILE = Default Certificate Profile

DEFAULTHARDTOKENISSUER    = Default Hard Token Issuer

DEFAULTTOKEN              = Default Token

DELETEENDENTITYPROFILE    = Delete End Entity Profile

DELETEUSERDATASOURCE      = Delete User Data Source

EDITENDENTITYPROFILE      = Edit End Entity Profile

EDIT_ENDENTITY_TITLE      = Edit End Entity

EDIT_ENDENTITY_HEADING    = Edit End Entity

EDITUSERDATASOURCE        = Edit User Data Source

EEPROFILEALREADYEXISTS    = End Entity Profile already exists

EEPROFILEDOESNOTEXIST     = End Entity Profile does not exist, it may have been removed in another browser. Restart browser to refresh profile list.

EESUSINGPROFILE           = End Entities using the profile:

EESUBJDNVALIDATIONEMPTY   = End Entity Subject DN Attribute can not have empty validation regular expression!

EMAIL                     = E-mail address

EMAILADDRESS              = End Entity E-mail

EMAILADDRESS_HELP         = (Use only the domain part of the address, without the ‘@’ char)

EMAILEMPTYNONMODIFIABLE   = End Entity E-mail cannot be empty and non-modifiable.

EMAILINCOMPLETE           = Incomplete e-mail address.

EMPTY                     = EMPTY

ENDENTITY                 = End Entity

ENDENTITY_ABBR            = End Entity

ENDENTITYALREADYEXISTS    = End entity already exists, choose another Username.

ENDENTITYDOESNTEXIST      = End entity doesn’t exist.

ENDENTITYPROFILE          = End Entity Profile

ENDENTITYPROFILEID        = End Entity Profile ID

ENDENTITYSAVED            = End Entity Saved

ERRORNOPRINTERFOUND       = Error no printer found.

ERRORNOPRINTERISAVAIL     = Error no printer seems available. Printing have to be turned off in order to save.

EXAMPLE                   = E.g.

EXPORT                    = Export

EXPORTROFILES             = Export Profiles

FINDENDENTITYWITHUSERNAME = Search end entity with username

FINGERPRINT_SHA1          = Fingerprint SHA-1

FINGERPRINT_SHA256        = Fingerprint SHA-256

FORENDENTITY              = For End Entity

HARDTOKEN                 = Hard Token

HARDTOKENS_ABBR           = Hard Tokens

HAVEYOUREVOKEDTHEENDENTITIES = Are the selected end entities revoked?

HEXREQUIRED               = A hexadecimal value is required.

HISTORICALUSERDATA        = Historical End Entity Data

HISTORY                   = History

ILLEGALATTRIBUTE          = An empty attribute cannot be non-modifiable.

IMPORT                    = Import

IMPORTPROFILESFROM        = Import Profiles from Zip file

INHERITFROMCA             = Inherit from issuing CA

INVALIDCHARS              = Invalid character(s): 

INVALIDURL                = Invalid URL

INVALIDQUERY              = Invalid query.

ISSUANCEREVOCATIONREASON  = Revocation reason to set after certificate issuance

KEYALGORITHM              = Key Algorithm

KEYRECOVERABLE            = Key Recoverable

KEYRECOVERY               = Key Recovery

LISTOFENDENTITYPROFILES   = List of End Entity Profiles

LISTOFUSERDATASOURCES     = List of User Data Sources

MAINCERTIFICATEDATA       = Main certificate data

MANAGEENDENTITYPROFILES   = Manage End Entity Profiles

MANAGEUSERDATASOURCES     = Manage User Data Sources

MATCHCERTIFICATEPROFILE   = Certificate Profile

MATCHCOMMONNAME           = CN, Common name

MATCHCOUNTRY              = C, Country (ISO 3166)

MATCHDNSERIALNUMBER       = serialNumber, Serial number in DN

MATCHDOMAINCOMPONENT      = DC, Domain Component

MATCHEMAILADDRESS         = E-mail address

MATCHENDENTITYPROFILE     = End Entity Profile

MATCHGIVENNAME            = givenName, Given name (first name)

MATCHINITIALS             = initials, First name abbreviation

MATCHLOCALITY             = L, Locality

MATCHORGANIZATION         = O, Organization

MATCHORGANIZATIONALUNIT   = OU, Organizational Unit

MATCHSTATEORPROVINCE      = ST, State or Province

MATCHSTATUS               = Status

MATCHSURNAME              = surname, Family name

MATCHTITLE                = title, Title

MATCHUID                  = UID, Unique ID

MATCHUPN                  = MS UPN, User Principal Name

MAXFAILEDLOGINATTEMPTS    = Maximum number of failed login attempts

MINPWDSTRENGTH            = Minimum password strength (bits)

MISSINGCAIDS              = (Missing CA IDs)

MODIFYABLE                = Modifiable

MODIFYABLEFIELDS          = Modifiable Fields

MODIFIED                  = Modified

MUSTFILLINANOTIFICATIONSENDER  = You must fill in a notification sender if notification is to be used.

MUSTFILLINANOTIFICATIONSUBJECT = You must fill in a notification subject if notification is to be used.

MUSTFILLINANOTIFICATIONMESSAGE = You must fill in a notification message if notification is to be used.

NOENDENTITYPROFILEDEFINED      = No end entity profile is defined for this end entity.

NOCERTIFICATEPROFILEDEFINED    = No certificate profile is defined for this end entity.

NOTAUTHORIZEDTOCREATEENDENTITY = Authorization Denied, No create rights to any end entity profiles.

NOTAUTHORIZEDTOEDIT       = You are not authorized to edit end entity.

NOTAUTHORIZEDTOVIEW       = You are not authorized to view end entity.

NOTAUTHORIZEDTOVIEWCERT   = You are not authorized to view end entity’s certificates.

NOTAUTHORIZEDTOVIEWHIST   = You are not authorized to view end entity’s history.

NOTIFICATIONADDRESSMUSTBE = An e-mail address must be specified in order to send notification.

NOTIFICATIONEVENTS        = Notification Events

NOTIFICATIONMESSAGE       = Notification Message

NOTIFICATIONRECIPIENT     = Notification Recipient

NOTIFICATIONSENDER        = Notification Sender

NOTIFICATIONSENDERNOTVALID = The notification sender doesn’t seem to be a valid e-mail address.

NOTIFICATIONSUBJECT       = Notification Subject

NOENDENTITIESFOUND        = No end entities found.

NOTEMPLATEUPLOADED        = No Printing template is uploaded.

ONLYAUTHORIZEDENDENTITIESDEL   = Only authorized end entities where deleted.

ONLYAUTHORIZEDENDENTITIESCHANG = Only authorized end entities where changed.

ONLYAUTHORIZEDENDENTITIESREV   = Only authorized end entities where revoked.

ONLYLETTERSANDNUMBERS     = Only characters A–Z and 0–9 allowed in field.

ONLYMORFINGENDERFIELD     = Only ‘M’ or ‘F’ are allowed in field.

ONLYNONREVENDENTITIESREV  = Only end entities not in progress of being revoked were processed.

ONLYNUMBERALSANDDOTS      = Only numerals and ‘.’ are allowed in field.

ONLYSTATUSCANBESELECTED   = Only status values New (Or Key Recovery), Generated or Historical can be selected.

ONORAFTER                 = on or after the

ONORBEFORE                = on or before the

OTHERCERTIFICATEDATA      = Other certificate data

OTHERSUBJECTATTR          = Other subject attributes

ORIFCERTIFICATSERIAL      = Search end entity with Certificate SN (hex)

ORLISTEXPIRING            = Search end entities with certificates expiring within

ORTOKENSERIALPATTERN      = Search end entity with Hard Token SN (match)

ORWITHSTATUS              = Search end entities with status

PASSWORD                  = Password

PASSWORDORENROLLMENTCODE  = Password (or Enrollment Code)

PASSWORDMUSTBEREGEN       = Password must be regenerated when changing status of user.

PASSWORDSDOESNTMATCH      = Passwords don’t match.

PASSWORDREQUIRED          = A password is required.

PASSWORD_DEFINED_IN_PROFILE = Password will be retrieved from profile if this field is left blank.

PREVIOUSLYADDEDENDENTITIES= Previously added end entities

PRINT                     = Print

PRINTERNAME               = Printer Name

PRINTING                  = Printing of user data

PRINTEDCOPIES             = Printed Copies

PRINTUSERDATA             = Print User Data

PWGEN_DIGIT               = Digits only

PWGEN_LETTERDIGIT         = English letters and digits

PWGEN_ALLPRINTABLE        = All printable English characters

PWGEN_NOLOOKALIKELD       = English letters and digits except “O0lI1”

PWGEN_NOLOSALIKEENLD      = English letters and digits except “O0lI1ajeg”

PWGEN_NOSOUNDALIKEENLD    = English letters and digits except “ajeg”

RECOVERKEY                = Recover Key

REGENERATENEWPASSWORD     = Regenerate New Password

RELOAD                    = Reload

REMAININGLOGINATTEMPTS    = Remaining login attempts

REQKSALGTYPE              = Requested Key Algorithm

REQKSALGSUBTYPE           = Requested Key Spec

REQUIRED                  = Required

REQUIREDCARDNUMBER        = You are required to enter a card number.

REQUIREDUSERNAME          = You are required to enter a Username.

REQUIREDPASSWORD          = You are required to enter a Password.

REQUIREDEMAIL             = You are required to enter an e-mail address.

RESETLOGINATTEMPTS        = Reset login attempts

REVERSEFIELDCHECKS        = Reverse Subject DN and Subject Alt Name Checks

REVOCATIONREASONS         = Revocation reasons :

REVOKE                    = Revoke

UNREVOKE                  = Reactivate

REVOKED                   = Revoked

REACTIVATED_REMOVEFROMCRL = No. Reactivated and pending removal from Base CRL.

REVOKEANDDELETE           = Revoke And Delete

REVOKESELECTED            = Revoke Selected

ROWSWILLBEDISPLAYED       = rows will be displayed.

SEARCHENDENTITIES         = Search End Entities

SENDNOTIFICATION          = Send Notification

SERIALNUMBERALREADYEXISTS = The SubjectDN Serial Number already exists, choose another Serial Number.

SIGNATUREALGORITHM        = Signature Algorithm

STATUS                    = Status

STATUSFAILED              = Failed

STATUSGENERATED           = Generated

STATUSINITIALIZED         = Initialized

STATUSINPROCESS           = In process

STATUSHISTORICAL          = Historical

STATUSKEYRECOVERY         = Key Recovery

STATUSNEW                 = New

STATUSREVOKED             = Revoked

SUBJECTALTNAME            = Subject Alternative Name

SUBJECTDIRATTRIBUTES      = Subject Directory Attributes

SUBJECTDN                 = Subject DN

SUBJECTDNEMAILEMPTY       = Required subject DN Attribute cannot be non-modifiable and empty for field emailAddress, E-mail

SUBJECTDNFIELDEMPTY      =  Required Subject DN Attribute cannot be non-modifiable and empty for field

SUBJECTDNINVALID          = Subject DN is not valid

NEWSUBJECTDNINVALID       = New Subject DN for CA Name Change is not valid. It must be properly formatted and contain the Common Name

NEWSUBJECTDNSAMEASCURRENT = New Subject DN for CA Name Change is equal to current Subject DN

RAWSUBJECTDN              = Raw subject DN

RAWSUBJECTDN_HELP         = If ‘Allow subject DN override by End Entity Information’ is enabled.

SUBJECTDNBADFORCVC        = Subject DN must contain the Common Name and Country attributes for CVC CAs.

TIMEOFEND                 = Certificate Validity End Time

TIMEOFSTART               = Certificate Validity Start Time

TOKEN                     = Token

TOKENMUST                 = A token must be selected.

TOKENSOFTJKS              = JKS file

TOKENSOFTP12              = P12 file

TOKENSOFTPEM              = PEM file

TOKENSOFTUSERGENERATED    = User Generated

TOO_LARGE_RESULT          = Result set was larger than the configured limitation. Only the first

USEHARDTOKENISSUERS       = Hard Token Issuers

UNAUTHTOEESANDAUTHRULES   = You are not authorized to view any of the End Entities or authorization rules using the End Entity Profile.

UNUSED                    = Unused

USEINBATCH                = Batch generation (clear text pwd storage)

USEINBATCH_ABBR           = Batch generation

USEENTITYEMAILFIELD       = Use entity e-mail field

USERDATASOURCE            = User Data Source

USERDATASOURCEALREADY     = User Data Source already exists.

USERDATASOURCETYPE        = User Data Source Type

USERNAME                  = Username

USERNAME_ABBR             = Username

USERNAMEWILLBEAUTOGENERATED = Username will be autogenerated

USESEMAILFIELDDATA        = Use data from E-mail address field

VALIDATION                = Validation

VER                       = v.

VIEWENDENTITYPROFILE      = View End Entity Profile

VIEWENDENTITYPROFILES     = View End Entity Profiles

VIEW_ENDENTITY_TITLE      = View End Entity

VIEW_ENDENTITY_HEADING    = View End Entity

VIEW_HARDTOKENS_TITLE     = View Hard Tokens

VIEW_HISTORY_TITLE        = View End Entity History

VIEWNEWER                 = View Newer

VIEWOLDER                 = View Older

VIEWISSUING               = View Issuing Certificate

VIEWSUBORDINATE           = View Subordinate Certificate

YOUAREREQUIRED            = You are required to enter a

YOUAREREQUIREDTONOT       = You are required not to enter a

YOUCANNOTUSEEMPTYPROFILE  = You can not use EMPTY profile as template for other profiles.

YOUCANTDELETEEMPTYPROFILE = You can not delete the EMPTY end entity profile.

YOUCANTEDITEMPTYPROFILE   = You can not edit the EMPTY end entity profile.

YOUCANTVIEWEMPTYPROFILE   = You can not view the EMPTY end entity profile.

YOUMUSTSPECIFYUSERNAME    = You must specify a username in parameter “username”.

YOUMUSTSPECIFYCERT        = You must specify the certificate serial number or end entity username as parameter.


### Services Module

ADDSERVICE                = Add Service

ADMINMESSAGE              = Administrator Message

ADMINMESSAGE_HELP         = (Substitution variables defined for notifications in the manual can be used to create the message).

ADMINSUBJECT              = Notification Subject to Administrator

BACKTOSERVICES            = Back to Services

CASTOCHECK                = CAs to Check

CERTEXPIRATIONSETTINGS    = Certificate Expiration Settings

CERTNOTIFICATIONWORKER    = Certificate Expiration Checker

CERTIFICATEPROFILESTOCHECK = Certificate Profiles to Check

CRLDOWNLOADWORKER         = CRL Downloader

CRLDOWNLOADWORKERSETTINGS = CRL Downloader Worker Settings

CRLDOWNLOAD_IGNORENU      = Ignore nextUpdate and always download the CRL

CRLDOWNLOAD_MAXSIZE       = Maximum allowed size to download (bytes)

CRLUPDATEWORKER           = CRL Updater

CRLUPDATEWORKERSETTINGS   = CRL Update Worker Settings

CUSTOMACTION              = Custom Action

CUSTOMACTIONCLASSPATH     = Custom Action Class Path

CUSTOMACTIONPROPERTIES    = Custom Action Properties

CUSTOMACTIONSETTINGS      = Custom Action Settings

CUSTOMINTERVAL            = Custom Interval

CUSTOMINTERVALCLASSPATH   = Custom Interval Class Path

CUSTOMINTERVALPROPERTIES  = Custom Interval Properties

CUSTOMINTERVALSETTINGS    = Custom Interval Settings

CUSTOMWORKER              = Custom Worker

CUSTOMWORKERCLASSPATH     = Custom Worker Class Path

CUSTOMWORKERPROPERTIES    = Custom Worker Properties

CUSTOMWORKERSETTINGS      = Custom Worker Settings

DELETESERVICE             = Delete Service

EDITSERVICE               = Edit Service

ENDUSERMESSAGE            = End User Message

ENDUSERMESSAGE_HELP       = (Substitution variables defined for notifications in the manual can be used to create the message).

ENDUSERSUBJECT            = Notification Subject to End User

ERRORADDINGSERVICE        = Error adding service

ERROREDITINGSERVICE       = Error when editing service

HSMKEEPALIVEWORKER        = HSM Keepalive Service

LISTOFSERVICES            = List of Services

MAILACTIONSENDERADDRESS   = Sender Address

MAILACTIONSENDERADDRESSERR= Error: A sender address is required.

MAILACTIONSETTINGS        = Mail Action Settings

MAILACTIONRECIEVERADDRESS = Receiver Address

MAILNOTIFICATIONACTION    = Mail Notification

MANAGESERVICES            = Manage Services

NOACTION                  = No Action

PERIODICALVALUEERROR      = Error: The value of the periodical interval is incorrect.

PINTONODES                = Pin to Specific Node(s)

PINTONODESUNKNOWNNODE     = (unknown node)

PUBLISHQUEUEWORKER        = Publish Queue Process Service

PUBLISHERQUEUESETTINGS    = Publish queue process settings

PUBLISHERSTOCHECK         = Publishers to check

RENEWCAWORKER             = Renew CA Service

RENEWCASETTINGS           = Renew CA Settings

RUNONALLNODES             = Run on all Nodes

SECONDS                   = Seconds

ROLLOVERWORKER            = Rollover Service

ROLLOVERSETTINGS          = Rollover Settings

SELECTACTION              = Select Action

SELECTINTERVAL            = Select Interval

SELECTWORKER              = Select Worker

SENDNOTIFICATIONTOADMIN   = Send Notification to Administrator

SENDNOTIFICATIONTOADMIN_HELP = (using the email specified in the Receive Address field)

SENDNOTIFICATIONTOENDUSER = Send Notification to End User

SENDNOTIFICATIONTOENDUSER_HELP = (using the email specified in the end entity data)

SERVICENAMEALREADYEXISTS  = Service name already exists

THECHARACTERSARENTALLOWED = Error: the character ‘;’ isn’t allowed in service name.

TIMEBEFOREEXPIRATION      = Time before notification is sent

TIMERENEWBEFOREREXPIRE    = Time before CA expires to renew

TIMEUNTILUSEREXPIRE       = Time until user password expire

TIMEBEFOREEXPIRATIONERROR = Error: Only numbers can be entered in the time before expiration field.

USERPASSWORDEXPIREWORKER  = User Password Expire Service

USEREXPIRATIONSETTINGS    = User Password Expiration Settings

VIEWSERVICE               = View Service

YOUHAVETOENTERASERVICE    = You have to enter a service name.

YOUHAVETOSELECTASERVICE   = You have to select a service to manage.

WARNINGCHANGINGPROFILE    = Warning: Changing End Entity Profiles will cause all unsaved changes to be lost.

#-- Custom service PeerIkbUpdaterWorker
PEERINTERNALKEYBINDINGUPDATERWORKER_TITLE = Remote Internal Key Binding Updater
PEERINTERNALKEYBINDINGUPDATERWORKER_PEERCONNECTORID = Peer System
PEERINTERNALKEYBINDINGUPDATERWORKER_RENEWKEYS = Renew key pair
PEERINTERNALKEYBINDINGUPDATERWORKER_TIMEBEFORECERTIFICATEEXPIRES = Time before certificate expires
PEERINTERNALKEYBINDINGUPDATERWORKER_TIMEUNITVALUE = Time unit of certificate expiry
PEERINTERNALKEYBINDINGUPDATERWORKER_WORKER_CAIDSTOCHECK = Process key bindings where certificate is issued by
PEERINTERNALKEYBINDINGUPDATERWORKER_ANYLOCALCA = Any active local X509 CA


### Peer Connector module

NAV_PEERCONNECTOR = Peer Systems
PEERS_TITLE = Peer Systems
PEERS_INCOMING_ALLOWED = Allow incoming connections.
PEERS_OUTGOING_ALLOWED = Allow outgoing connections.
PEERS_NODEAUTH_AKB = Node credentials
PEERS_NODE_SOURCEID = Current source ID
PEERS_OUTGOING = Outgoing Peer Connectors
PEERS_OUTGOING_NONE = No outgoing connectors have been configured.
PEERS_POOL_STATS = Connection pool status
PEERS_OUTGOING_CERT = Active TLS Client Certificate
PEERS_OUTGOING_NOCERT = No certificate used.
PEERS_OUTGOING_CREDENTIAL = Client TLS configuration
PEERS_OUTGOING_SERVERTLS = Server TLS certificate
PEERS_OUTGOING_ROLE = Server administrator role
PEERS_POOL_LEASED = In use
PEERS_POOL_AVAILABLE = Ready
PEERS_POOL_MAX = Max
PEERS_POOL_PENDING = Queued
PEERS_POOL_NOTSTARTED = Connection pool not started.
PEERS_POOL_DISABLED = Connection pool disabled.
PEERS_OUTGOING_STOP = Reset
PEERS_OUTGOING_EDIT = Edit
PEERS_OUTGOING_CLONE = Clone
PEERS_OUTGOING_ADD = Add
PEERS_OUTGOING_CREATEAUTH = Authorize requests
PEERS_OUTGOING_EXTENDAUTH = Authorized requests
PEERS_INCOMING = Incoming Connections
PEERS_INCOMING_NONE = No peer has successfully connected to this node.
PEERS_INCOMING_AUTH = Remote identity
PEERS_INCOMING_IP = Remote address
PEERS_INCOMING_LAST = Last seen
PEERS_OUTGOING_CLEAR = Clear 
PEERS_TITLE_EDIT = Edit Peer Connector
PEERS_TITLE_CREATE = Create Peer Connector
PEERS_TITLE_DELETE = Delete Peer Connector
PEERS_EDIT_ID = ID
PEERS_EDIT_NAME = Name
PEERS_EDIT_URL = URL
PEERS_EDIT_CREDENTIAL = Authentication Key Binding
PEERS_EDIT_ENABLED = Enabled
PEERS_EDIT_SAVE = Save
PEERS_EDIT_CREATE = Create
PEERS_EDIT_CREATE_NFO_DONE = A new outgoing peer connector was created.
PEERS_EDIT_CANCEL = Cancel
PEERS_EDIT_DELETE = Delete
PEERS_EDIT_CLONE = Clone
PEERS_EDIT_CLONE_POSTFIX = (clone)
PEERS_EDIT_CLONE_NFO_DONE = A clone of the connector was created.
PEERS_EDIT_DELETE_REALLY = Are you sure you want to delete this connector?
PEERS_EDIT_DELETE_CANCEL = Cancel
PEERS_EDIT_DELETE_CONFIRM = Delete
PEERS_EDIT_ERR_UNAUTH = You are not authorized to this operation.
PEERS_EDIT_ERR_NONAME = Name cannot be empty.
PEERS_EDIT_ERR_INVALIDURL = Invalid URL.
PEERS_EDIT_ERR_INVALIDURLHTTPS = Only the https protocol is allowed.
PEERS_EDIT_ERR_NOAUTHANDENABLED = Peer connector cannot be enabled without outgoing credentials.
PEERS_EDIT_LONG_HANGING = Incoming requests
PEERS_EDIT_LONG_HANGING_USE = Process incoming requests
PEERS_EDIT_LONG_HANGING_MIN = Minimum parallel requests
PEERS_EDIT_LONG_HANGING_MAX = Maximum parallel requests
PEERS_EDIT_INFO_CANCELED = Operation canceled.
PEERS_EDIT_INFO_DELETED = Peer connector deleted.
PEERS_OUTGOING_PING = Ping
PEERS_OUTGOING_CHECK = Check authorization
PEERS_OUTGOING_MANAGE = Manage
PEERS_NOAKB_AVAILABLE = Configuration required
PEERS_INCOMING_ROLE = First matching role
PEERS_INCOMING_NOROLE = None.
PEERS_INCOMING_CREATEAUTH = Create role
PEERS_INCOMING_EXTENDAUTH = Modify role
PEERS_UNABLE_TO_CONNECT = Unable to connect to peer.
PEERS_MESSAGE_NOT_SUPPPORTED_BY_PEER = Not authorized to the requested operation or this peer does not support it.
PEERS_MESSAGE_UNEXPECTED_RESPONSE = Unexpected response from peer.
PEERS_MESSAGE_ERRORREPLY = Peer replied with error message.

PEERS_MGMT_TITLE = Management Operations for
PEERS_MGMT_NAME = Peer Connector
PEERS_MGMT_URL = End point
PEERS_MGMT_REFRESH = Refresh
PEERS_MGMT_CANCEL = Back
PEERS_MGMT_SAVE = Save

#-- Peer Synchronization
PEERS_MGMT_SYNC_TITLE = Certificate Data Synchronization
PEERS_MGMT_SYNC_STATUS = Status
PEERS_MGMT_SYNC_PROGRESS = Progress
PEERS_MGMT_SYNC_RATE = Current rate
PEERS_MGMT_SYNC_TIMELEFT = Estimated time left
PEERS_MGMT_SYNC_DURATION = Duration
PEERS_MGMT_SYNC_TIMEOUT = Timeout
PEERS_MGMT_SYNC_START = Start
PEERS_MGMT_SYNC_CANCEL = Cancel
PEERS_MGMT_SYNC_CLEAR = Clear
PEERS_MGMT_SYNC_NFO_CANCEL = Data synchronization cancelled.
PEERS_MGMT_SYNC_NFO_STARTED = Data synchronization started.
PEERS_MGMT_SYNC_STORECERTIFICATE = Push certificate
PEERS_MGMT_SYNC_INCLUDEINTEGRITY = Push integrity protection
PEERS_MGMT_SYNC_ONLYPUBLISHREVOKED = Only sync revoked
PEERS_MGMT_SYNC_IGNOREUPDATETIME = Ignore newer entries at peer
PEERS_MGMT_SYNC_DONTSTORECERTIFICATEMETADATA = Don't store certificate meta data except for CA and OCSP signing certificates
PEERS_MGMT_SYNC_SKIPROWESTIMATION = Skip row estimation
PEERS_MGMT_SYNC_ONLYCHECK = Only check for discrepancies (dry run)
PEERS_MGMT_SYNC_FILTERBY = Filter
PEERS_MGMT_SYNC_FILTER_NONE = None
PEERS_MGMT_SYNC_FILTER_ISSUER = Issuer
PEERS_MGMT_SYNC_FILTER_CERTPROFILE = Certificate Profile
PEERS_MGMT_SYNC_ISSUERS = Issuers
PEERS_MGMT_SYNC_CERTPROFILE = Certificate Profiles
PEERS_MGMT_SYNC_NFO_CANCELLED_FULL = Synchronization cancelled.
PEERS_MGMT_SYNC_NFO_FINISHED_FULL = Synchronization finished.
PEERS_MGMT_SYNC_NFO_FAILURE_FULL = Synchronization failed.
PEERS_MGMT_SYNC_NFO_NOTRUNNING = Not running.
PEERS_MGMT_SYNC_NFO_INPROGRESS = Synchronization in progress.
PEERS_MGMT_SYNC_NFO_RESPONSEDTOPING = Responded to ping request within
PEERS_MGMT_SYNC_NFO_LESSTHANS = less than a second
PEERS_MGMT_SYNC_NFO_SECONDS = seconds
PEERS_MGMT_SYNC_NFO_MINUTES = minutes
PEERS_MGMT_SYNC_NFO_ROWSPERSEC = rows/second

#-- Peer Internal Key Bindings
PEERS_MGMT_IKBS_TITLE = Remote Key Bindings
PEERS_MGMT_IKBS_NAME = Remote name
PEERS_MGMT_IKBS_ISSUER = Issuer
PEERS_MGMT_IKBS_CERTIFICATE = Bound certificate
PEERS_MGMT_IKBS_EXPIRES = Expiration date
PEERS_MGMT_IKBS_REMOTEKEYS = Remote key pair
PEERS_MGMT_IKBS_STATUS = Status
PEERS_MGMT_IKBS_ENDENTITY = Local end entity
PEERS_MGMT_IKBS_RENEWKEYS_HELP = Renew this key pair during certificate renewal.
PEERS_MGMT_IKBS_ACTION = Action
PEERS_MGMT_IKBS_ISSUE = Issue signing certificate
PEERS_MGMT_IKBS_RENEW = Renew
PEERS_MGMT_IKBS_NONEAVAILABLE = No authorized remote Internal Key Bindings found.
PEERS_MGMT_IKBS_NFO_KEYSRENEWED = Remote key pair renewed.
PEERS_MGMT_IKBS_NFO_UPDATED = Certificate was renewed.
PEERS_MGMT_IKBS_NFO_UPDATEDFULL = Key pair and certificate was renewed.
PEERS_MGMT_IKBS_ERR_NOSUCHEE = No end entity with the requested name found.
PEERS_MGMT_IKBS_ERR_NOTAUTHORIZEDTOEE = Authorization to this end entity was denied.
PEERS_MGMT_IKBS_ERR_EEPREPARE = Failed to prepare the end entity for certificate issuance.
PEERS_MGMT_IKBS_ERR_ISSUE = Failed to issue a certificate using the specified end entity.

#-- Peer Incoming Connection Authorization handling
PEERS_INAUTH_TITLE_CREATE = Authorize incoming connections
PEERS_INAUTH_TITLE_EXTEND = Modify authorization for incoming connections
PEERS_INAUTH_AUTH = Client certificate subject DN
PEERS_INAUTH_ISSUER = Client certificate issuer
PEERS_INAUTH_SERIALNUMBER = Client certificate serial number
PEERS_INAUTH_REMOTEADDR = Remote address
PEERS_INAUTH_LASTSEEN = Last seen
PEERS_INAUTH_ROLENAME = Role
PEERS_INAUTH_GENERIC = Generic rules
PEERS_INAUTH_CARULES = CAs
PEERS_INAUTH_IKBRULES = Internal Key Bindings
PEERS_INAUTH_CTRULES = Crypto Tokens
PEERS_INAUTH_PPRULES = Publishing
PEERS_INAUTH_CREATE = Create new role
PEERS_INAUTH_MODIFY = Modify role
PEERS_INAUTH_CANCEL = Back without saving
PEERS_INAUTH_ROLESELECT = Role
PEERS_INAUTH_CREATENEW = − Create new role −
PEERS_INAUTH_ADDTOROLE = Select
PEERS_INAUTH_ERR_ROLENAMEEMPTY = Role name cannot be empty.
PEERS_ROLE_SELECTION_SUCCEEDED = Administrator successfully added to role.
PEERS_ROLE_CREATION_SUCCEEDED = Role created.
PEERS_ROLE_CREATION_FAILED = Failed to create role.
PEERS_ROLE_MODIFY_SUCCEEDED = Role saved.
PEERS_ROLE_MODIFY_FAILED = Failed to modify role.
PEERS_INAUTH_ACCESS = Access
PEERS_INAUTH_RULE_PEERINCOMING = Role is intended for peer connections
PEERS_INAUTH_RULE_PEERINCOMINGMASTERRA = Accept long hanging connections (This instance is an External RA polled by CA.)
PEERS_INAUTH_RULE_PEERINCOMINGSLAVERA = Accept RA requests (This instance is serving a directly connected External RA.)
PEERS_INAUTH_RULE_WRITECERT = Publish certificate
PEERS_INAUTH_RULE_READCERT = Compare certificate synchronization status
PEERS_INAUTH_RULE_WRITECRL = Publish CRL
PEERS_INAUTH_RULE_IKB_NONE = No access
PEERS_INAUTH_RULE_IKB_VIEW = View only
PEERS_INAUTH_RULE_IKB_MODIFY = Renew certificate
PEERS_INAUTH_RULE_NFO_CT1 = Renewal of Internal Key Binding
PEERS_INAUTH_RULE_NFO_CT2 = requires access to CryptoToken
PEERS_INAUTH_RULE_NFO_CA1 = Renewal of Internal Key Binding
PEERS_INAUTH_RULE_NFO_CA2 = requires access to CA
PEERS_INAUTH_RULE_NFO_NOTEXTCA1 = Renewal of Internal Key Binding
PEERS_INAUTH_RULE_NFO_NOTEXTCA2 = requires regular configuration of access to non-external CA

#-- Peer Processing Authorization handling
PEERS_PROCESSAUTH_TITLE_CREATE = Authorize request processing
PEERS_PROCESSAUTH_TITLE_EXTEND = Modify authorization for request processing
PEERS_PROCESSAUTH_SERVERTLS = Server TLS certificate subject DN
PEERS_PROCESSAUTH_ISSUER = Server TLS certificate issuer DN
PEERS_PROCESSAUTH_SERIALNUMBER = Server TLS certificate serial number
PEERS_PROCESSAUTH_ENDPOINT = Server end point
PEERS_PROCESSAUTH_ROLENAME = Role
PEERS_PROCESSAUTH_ROLESELECT = Role
PEERS_PROCESSAUTH_CREATENEW = − Create new role −
PEERS_PROCESSAUTH_ADDTOROLE = Select
PEERS_PROCESSAUTH_CREATE = Create new role
PEERS_PROCESSAUTH_MODIFY = Modify role
PEERS_PROCESSAUTH_CANCEL = Back without saving
PEERS_PROCESSAUTH_GENERIC = Generic rules
PEERS_PROCESSAUTH_RULE_INVOKE_MASTER = Allow processing of requests from peer
PEERS_PROCESSAUTH_RARULES = RA rules
PEERS_PROCESSAUTH_CARULES = Process requests for CA(s)
PEERS_PROCESSAUTH_EEPRULES = Process requests for End Entity Profile(s)
PEERS_PROCESSAUTH_PROTOCOL = Process requests from protocols
PEERS_PROCESSAUTH_RULE_VIEWANDSEARCH = View and search for certificates
PEERS_PROCESSAUTH_RULE_ISSUECERTS = Enroll end entities and issue certificates
PEERS_PROCESSAUTH_RULE_KEYRECOVERY = Key recovery operations
PEERS_PROCESSAUTH_RULE_APPROVALS = Approval management
PEERS_PROCESSAUTH_RULE_REVOKE = Revoke certificates
PEERS_PROCESSAUTH_RULE_DELETEEE = Delete end entities
PEERS_PROCESSAUTH_RULE_VIEWCA = View CAs and CRLs

#-- Peer Protocol Access
PEERS_PROCESSAUTH_RULE_ACME = ACME
PEERS_PROCESSAUTH_RULE_CMP = CMP
PEERS_PROCESSAUTH_RULE_EST = EST
PEERS_PROCESSAUTH_RULE_REST = REST
PEERS_PROCESSAUTH_RULE_SCEP = SCEP
PEERS_PROCESSAUTH_RULE_WS = Web Service


### Publisher module

#-- PeerPublisher
PEERPUBLISHER = Validation Authority Peer Publisher
PEERPUBLISHER_PEERID = Peer System
PEERPUBLISHER_STORECERT = Store certificate at the Validation Authority
PEERPUBLISHER_STORECRL = Store CRL at the Validation Authority
PEERPUBLISHER_ONLYPUBLISHREVOKED = Publish only revoked certificates
PEERPUBLISHER_INCLUDEINTEGRITY = Include database integrity information
PEERPUBLISHER_IGNOREUPDATETIME = Ignore newer entries at peer
PEERPUBLISHER_DONTSTORECERTIFICATEMETADATA = Don't store certificate meta data except for CA and OCSP signing certificates
PEERPUBLISHRULES = Peer Publisher Rules

#-- CertSafe Publisher (Enterprise only)
CERTSAFEPUBLISHER_CERTSAFE_URL = CertSafe Server URL
CERTSAFEPUBLISHER_CERTSAFE_AUTHKEYBINDINGNAME = Authentication Key Binding for Connection
CERTSAFEPUBLISHER_CERTSAFE_CONNECTIONTIMEOUT = HTTPS connection timeout (ms)

#-- GeneralPurposeCustomPublisher
GENERALPURPOSECUSTOMPUBLISHER = General Purpose Custom Publisher
GENERALPURPOSECUSTOMPUBLISHER_CRL_FAILONERRORCODE = Fail CRL publishing on script error code
GENERALPURPOSECUSTOMPUBLISHER_CRL_FAILONSTANDARDERROR = Fail CRL publishing on output to stderr
GENERALPURPOSECUSTOMPUBLISHER_CRL_APPLICATION = Full pathname of CRL publishing script
GENERALPURPOSECUSTOMPUBLISHER_CERT_FAILONERRORCODE = Fail certificate publishing on script error code
GENERALPURPOSECUSTOMPUBLISHER_CERT_FAILONSTANDARDERROR = Fail certificate publishing on output to stderr
GENERALPURPOSECUSTOMPUBLISHER_CERT_APPLICATION = Full pathname of certificate publishing script
GENERALPURPOSECUSTOMPUBLISHER_REVOKE_FAILONERRORCODE = Fail revocation publishing on script error code
GENERALPURPOSECUSTOMPUBLISHER_REVOKE_FAILONSTANDARDERROR = Fail revocation publishing on output to stderr
GENERALPURPOSECUSTOMPUBLISHER_REVOKE_APPLICATION = Full pathname of revocation publishing script
GENERALPURPOSECUSTOMPUBLISHER_CRL_CALCLULATEDELTACRLLOCALLY = Calculate Delta CRL locally

#-- LDAP Search Publisher

SEARCHBASEDN              = Suffix base DN of the LDAP Search

SEARCHBASEDN_HELP         = Suffix base DN of the LDAP Search to match an entry using a defined search filter.

SEARCHFILTER              = LDAP filter of the search

SEARCHFILTER_HELP         = LDAP filter used to match an existing LDAP entry that could exist behind the LDAP branch specified in SEARCHBASEDN. It’s possible to use variables like $USERNAME $UID $CN $O $OU $C, obtained from the EJBCA registered user.

LDAPSEARCHPUBLISHER       = LDAP v3 Search Publisher

LDAPSEARCHSETTINGS        = LDAP search settings

LDAPSETUSERPASSWORD       = Set userPassword attribute

ADDMULTIPLECERTIFICATES   = Add multiple certificates per user

REMOVEREVOKEDCERTIFICATES = Remove certificates when revoked

REMOVEUSERONCERTREVOKE    = Remove LDAP user when certificate revoked

PUBLISHERQUEUESTATUS      = Publisher Queue Status

UPLOADUSERDATATEMP        = Upload User Data Template

#-- VA Publisher

VALIDATIONAUTHORITYPUBLISHER = Deprecated VA Publisher, will be upgraded in post-upgrade

ENTERPRISEVALIDATIONAUTHORITYPUBLISHER = Validation Authority Publisher

VASETTINGS                  = Validation Authority Settings

ENTERPRISEVALIDATIONAUTHORITYPUBLISHER_DATASOURCE = Data Source

ENTERPRISEVALIDATIONAUTHORITYPUBLISHER_DONTSTORECERTIFICATEMETADATA = Don't store certificate meta data except for CA and OCSP signing certificates

ENTERPRISEVALIDATIONAUTHORITYPUBLISHER_STORECERT = Store certificate at the Validation Authority

ENTERPRISEVALIDATIONAUTHORITYPUBLISHER_ONLYPUBLISHREVOKED  = Publish only revoked certificates

ENTERPRISEVALIDATIONAUTHORITYPUBLISHER_STORECRL = Store CRL at the Validation Authority

ENTERPRISEVALIDATIONAUTHORITYPUBLISHER_STORECRL_HELP = The publisher must store certificates, and may not only publish revoked certificates, in order to store CRLs.

LEGACYVALIDATIONAUTHORITYPUBLISHER = Legacy Validation Authority Publisher

LEGACYVALIDATIONAUTHORITYPUBLISHER_DATASOURCE = Data Source

LEGACYVALIDATIONAUTHORITYPUBLISHER_STORECERT = Store certificate at the Validation Authority

LEGACYVALIDATIONAUTHORITYPUBLISHER_ONLYPUBLISHREVOKED = Publish only revoked certificates

LEGACYVALIDATIONAUTHORITYPUBLISHER_STORECRL = Store CRL at the Validation Authority

#-- Publisher queue

PUBLISHERQUEUE              = Publisher Queue

CURRENTQUEUELENGTH          = Current length (< 1 min, 1–10 min, 10–60 min, > 60 min)

ONLYUSEQUEUE                = No direct publishing, only use queue

KEEPPUBLISHEDINQUEUE        = Keep successfully published items in database

USEQUEUEFORCRLS             = Use queue for CRLs

USEQUEUEFORCERTIFICATES     = Use queue for certificates

QUEUELENGTH                 = Queue Length

QUEUELENGTH_ABBR            = Length

NOPUBLISHERS                = No publishers defined.


### Administrator Roles

#-- Roles
ROLES_ACTION_NEWNAMESPACE   = New...
ROLES_LABEL_RASTYLES        = RA Styles
ROLES_LABEL_NAMESPACE       = Namespace
ROLES_LABEL_ROLENAME        = Role name
ROLES_INFO_DELETED          = Role deleted.
ROLES_INFO_RENAMED          = Role renamed.
ROLES_INFO_ROLEADDED        = Role added.
ROLES_ERROR_UNAUTH          = You are not authorized to view or manage roles.
ROLES_ERROR_UNAUTHORIZED    = Authorization denied: {0}
ROLES_ERROR_EMPTYNAME       = Role name cannot be empty.
ROLES_NAMESPACE_PLACEHOLDER = Optional namespace
ROLES_ROLENAME_PLACEHOLDER  = Mandatory role name

#-- Role Members
ROLEMEMBERS_DESCRIPTION     = Description
ROLEMEMBERS_DELETE_TITLE    = Delete role member
ROLEMEMBERS_LABEL_NAMESPACE = Namespace
ROLEMEMBERS_LABEL_ROLENAME  = Role name
ROLEMEMBERS_INFO_REMOVED    = Role member removed.
ROLEMEMBERS_ERROR_NOROLE    = You are not authorized to view members of this role or the role does not exist.
ROLEMEMBERS_ERROR_UNAUTH    = Authorization denied: {0}

#-- Access Rules
ACCESSRULES_SELECT          = Select
ACCESSRULES_INFO_SAVED      = Role updated successfully.
ACCESSRULES_INFO_SAVED_MIN  = Role updated successfully. {0} rule(s) already covered by inheritance were excluded.
ACCESSRULES_ERROR_UNAUTH    = Authorization denied: {0}
ACCESSRULES_STATE_UNDEFINED = Inherit
ACCESSRULES_STATE_UNDEFINED_ROOT = Inherit (Deny)
ACCESSRULES_STATE_ALLOW     = Allow
ACCESSRULES_STATE_DENY      = Deny
ACCESSRULES_LINK_SUMMARY    = Summary
ACCESSRULES_LINK_CONFIG     = Configuration
ACCESSRULES_RESOURCE        = Resource
ACCESSRULES_STATE           = Rule


### System Upgrade

UPGRADE_TITLE               = System Upgrade
UPGRADE_ERR_UNAUTH          = You are not authorized to post-upgrade task.
UPGRADE_VERSION_NEWEST      = Newest version in cluster
UPGRADE_VERSION_EFFECTIVE   = Effective version of data
UPGRADE_STATUS              = Post-upgrade process on this node
UPGRADE_STATUS_RUNNING      = Running
UPGRADE_STATUS_NOTRUNNING   = Not running
UPGRADE_STATUS_FAILED       = Failed
UPGRADE_STATUS_CLUSTER      = Current post-upgrade started
UPGRADE_STATUS_CLUSTER_HELP = This value might be inaccurate due to caching.
UPGRADE_ACTION_START        = Start post-upgrade
UPGRADE_ACTION_REFRESH      = Refresh page.
UPGRADE_ACTION_CLEARLOCK    = Clear upgrade lock (only use this if the node that started post-upgrade has died)
UPGRADE_LOGGED_TITLE        = Post-Upgrade Log
UPGRADE_LOGGED_NONE         = No log available.
UPGRADE_INFO_TITLE          = Post-Upgrade Information
UPGRADE_INFO_WARNING        = The post-upgrade process must only be run on ONE of the cluster nodes AFTER updating ALL the cluster nodes to the same version of the software.
UPGRADE_INFO_NOTES          = After the post-upgrade procedure
UPGRADE_INFO_NOTES_TO680    = An administrator belonging to multiple roles will be granted the combined access (instead of using priority match by match key).


### Validators module

VALIDATOR                                           = Validator
VALIDATORS                                          = Validators
MANAGEVALIDATORS                                    = Manage Validators
LISTOFVALIDATORS                                    = List of Validators
BACKTOVALIDATORS                                    = Back to Validators
VIEWVALIDATOR_TITLE                                 = View Validator
EDITVALIDATOR_TITLE                                 = Edit Validator
VALIDATORALREADY                                    = Validator {0} already exists.
VALIDATORDOESNOTEXIST                               = Validator {0} does not exist.
COULDNTDELETEVALIDATOR                              = Could not delete validator, it is still used in a certificate profile or CA.
DELETEVALIDATOR_TITLE                               = Delete Validator
RENAMEVALIDATOR_TITLE                               = Rename Validator
CLONEVALIDATOR_TITLE                                = Clone Validator
CLONEVALIDATOR_FROMTEMPLATE                         = Template validator
CLONEVALIDATOR_NEWNAME                              = Name of new validator
VALIDATORSAVED                                      = Validator saved.
COMMAND_IS_NOT_PERMITTED                            = The command is forbidden (not on active whitelist).
COMMAND_IS_EMPTY                                    = The command is empty.

VALIDATORACCESSRULES                                = Validator Access Rules

VALIDATORNAME                                       = Name
VALIDATORTYPE                                       = Validator Type
VALIDATORALLCERTIFICATEPROFILES                     = Apply for all Certificate Profiles
VALIDATORCERTIFICATEPROFILE                         = Apply for Certificate Profiles
VALIDATOR_PERFORM_DURING                            = Perform Validation on
VALIDATORNOTBEFORE                                  = Certificates Issued Not Before
VALIDATORNOTAFTER                                   = Certificates Issued Not After

#-- External Command Certificate Validator
EXTERNALCOMMANDCERTIFICATEVALIDATOR                     = External Command Certificate Validator
EXTERNALCOMMANDCERTIFICATEVALIDATORSETTINGS             = External Command Certificate Validator Settings
EXTERNALCOMMANDCERTIFICATEVALIDATORPLATFORM             = OS
EXTERNALCOMMANDCERTIFICATEVALIDATOREXTERNALCOMMAND      = Full pathname of script
EXTERNALCOMMANDCERTIFICATEVALIDATORFAILONERRORCODE      = Fail on script error code
EXTERNALCOMMANDCERTIFICATEVALIDATORFAILONSTANDARDERROR  = Fail on output to error out
EXTERNALCOMMANDCERTIFICATEVALIDATORLOGSTANDARDOUT       = Log standard out
EXTERNALCOMMANDCERTIFICATEVALIDATORLOGERROROUT          = Log error out
EXTERNALCOMMANDCERTIFICATEVALIDATORTEST                 = Test
EXTERNALCOMMANDCERTIFICATEVALIDATORTESTPATH             = Test Certificate Path
EXTERNALCOMMANDCERTIFICATEVALIDATORTESTPATHMISSING      = Test Certificate Path is missing.
EXTERNALCOMMANDCERTIFICATEVALIDATORTESTOUT              = Test Out
EXTERNALCOMMANDCERTIFICATEVALIDATORTESTCOMMAND          = Test command
EXTERNALCERTIFICATEVALIDATORCOMMANDNOTFOUND             = Command ‘{0}’ could not be found.

#-- Blacklist Key Validator
#BLACKLISTKEYVALIDATOR                                  = Blacklist Key Validator
PUBLICKEYBLACKLISTKEYVALIDATORSETTINGS                  = Blacklist Key Validator Settings
PUBLICKEYBLACKLISTKEYVALIDATORKEYALGORITHMS             = Key Algorithms

#-- RSA Key Validator
#RSAKEYVALIDATOR                                        = RSA Key Validator
RSAKEYVALIDATORSETTINGS                                 = RSA Key Validator Settings
RSAKEYVALIDATORSETTINGSTEMPLATE                         = Validator Settings template
RSAKEYVALIDATORBITLENGTHS                               = Available bit lengths
RSAKEYVALIDATORPUBLICKEYEXPONENTONLYALLOWODD            = Only allow odd public key exponent
RSAKEYVALIDATORPUBLICKEYEXPONENTMIN                     = Public key exponent minimum value
RSAKEYVALIDATORPUBLICKEYEXPONENTMAX                     = Public key exponent maximum value
RSAKEYVALIDATORPUBLICKEYMODULUSONLYALLOWODD             = Only allow odd public key modulus
RSAKEYVALIDATORPUBLICKEYMODULUSDONTALLOWPOWEROFPRIME    = Don’t allow power of prime public key modulus
RSAKEYVALIDATORPUBLICKEYMODULUSDONTALLOWROCAWEAKKEYS    = Don’t allow ROCA weak keys (CVE-2017-15361)
RSAKEYVALIDATORPUBLICKEYMODULUSMINFACTOR                = Public key modulus smallest factor
RSAKEYVALIDATORPUBLICKEYMODULUSMIN                      = Public key modulus minimum value
RSAKEYVALIDATORPUBLICKEYMODULUSMAX                      = Public key modulus maximum value

#-- CAA Validator
#CAAVALIDATOR                                           = CAA Validator
CAAVALIDATORSETTINGS                                    = CAA Validator Settings
CAAVALIDATORDNSRESOLVER                                 = DNS Resolver
CAAVALIDATORISSUER                                      = Issuers
CAAVALIDATORISSUERHELP                                  = Write each issuer on a separate line
CAAVALIDATORVALIDATEDNSSEC                              = Validate DNSSEC
CAAVALIDATORLOOKUPDNAMES                                = Lookup DNAMEs
CAAVALIDATORIODEFSETTINGS                               = IODEF Settings
CAAVALIDATORUSEIODEFEMAIL                               = Use IODEF E-mail
CAAVALIDATOREMAILSENDER                                 = From:
CAAVALIDATOREMAILSUBJECT                                = Subject:
CAAVALIDATOREMAILCONTENT                                = Additional Information:
CAAVALIDATORUSEIODEFWEB                                 = Use IODEF WEB
CAAVALIDATORTRUSTANCHOR                                 = Trust Anchor (DNSSEC)
CAAVALIDATORTRUSTANCHORHELP                             = Default trust anchor is IANA Root Anchor (recommended)
CAAVALIDATORFAILONLOOKUPERRORHELP                       = Prohibit issuance when the domain is not signed and there is a lookup error (e.g. timeout or an invalid response).
CAAVALIDATORFAILONLOOKUPERROR                           = Fail on lookup error
CAAVALIDATORTLDIGNORELIST                               = Ignore Top Level Domains
CAAVALIDATORTLDIGNORELISTHELP                           = Write each TLD on a separate line
CAAVALIDATORDOMAINIGNORESTRING                          = Ignore Domain Names
CAAVALIDATORDOMAINIGNORESTRINGHELP                      = Write each domain on a separate line
CAAVALIDATORDNSRETRYDELAY                               = DNS Lookup Retry Delay
CAAVALIDATORDNSRETRYDELAYHELP                           = Specify time (milliseconds) to delay before retrying a failed lookup. Default: 500
CAAVALIDATORMAXIMUMRECURSIONS                           = Maximum lookup recursions
CAAVALIDATORMAXIMUMRECURSIONSHELP                       = Specify maximum number of DNS CNAME lookup recursions. Default and minimum value: 8

#-- ECC Key Validator
#ECCKEYVALIDATOR                                        = ECC Key Validator
ECCKEYVALIDATORSETTINGS                                 = ECC Key Validator Settings
ECCKEYVALIDATORSETTINGSTEMPLATE                         = Validator Settings Template
ECCKEYVALIDATORECCURVES                                 = Available curves
ECCKEYVALIDATORAVAILABLECURVES                          = Available curves
ECCKEYVALIDATORUSEFULLPUBLICKEYVALIDATION               = Use full public key validation
ECCKEYVALIDATORUSEFULLPUBLICKEYVALIDATIONROUTINE        = Use full public key validation

VALIDATORAPPLICABLEPHASE                            = Issuance Phase
VALIDATORPHASE_DATA_VALIDATION                      = Data Validation
VALIDATORPHASE_PRE_CERTIFICATE_VALIDATION           = Pre-certificate Validation
VALIDATORPHASE_CERTIFICATE_VALIDATION               = Certificate Validation

VALIDATORSETTINGSTEMPLATE                           = Validator Settings Template
VALIDATORSETTINGSTEMPLATE_USE_CP_SETTINGS           = Use certificate profile settings
VALIDATORSETTINGSTEMPLATE_USE_CAB_FORUM_SETTINGS    = Use CA/B-Forum (BR 1.4.2) settings
VALIDATORSETTINGSTEMPLATE_USE_CUSTOM_SETTINGS       = Use custom settings

VALIDATORDATECONDITION_LESS_THAN                    = Less than
VALIDATORDATECONDITION_LESS_OR_EQUAL                = Less or equal
VALIDATORDATECONDITION_GREATER_THAN                 = Greater than
VALIDATORDATECONDITION_GREATER_OR_EQUAL             = Greater or equal

VALIDATORNOTAPPLICABLEACTION                        = If Validator was not applicable
VALIDATORFAILEDACTION                               = If Validation failed
VALIDATORFAILEDACTION_DO_NOTHING                    = Do nothing
VALIDATORFAILEDACTION_LOG_INFO                      = Log info message
VALIDATORFAILEDACTION_LOG_WARN                      = Log warning message
VALIDATORFAILEDACTION_LOG_ERROR                     = Log error message
VALIDATORFAILEDACTION_ABORT_CERTIFICATE_ISSUANCE    = Abort certificate issuance

#-- GUI log events
VALIDATOR_VALIDATION_SUCCESS                        = Validation Success
VALIDATOR_VALIDATION_FAILED                         = Validation Failure
VALIDATOR_CHANGE                                    = Validator Edit
VALIDATOR_CREATION                                  = Validator Create
VALIDATOR_REMOVAL                                   = Validator Remove
VALIDATOR_RENAME                                    = Validator Rename
BLACKLIST_CREATION                                  = Blacklist Create
BLACKLIST_CHANGE                                    = Blacklist Change
BLACKLIST_REMOVAL                                   = Blacklist Remove

#-- SCP Publisher Plugin
SCPPUBLISHER_ANONYMIZE_CERTIFICATES					= Publish Without Identifying Information
SCPPUBLISHER_SSH_USERNAME							= Username for SSH Connection
SCPPUBLISHER_CRL_SCP_DESTINATION					= Destination URL for CRLs
SCPPUBLISHER_CERT_SCP_DESTINATION					= Destination URL for Certificates
SCPPUBLISHER_SCP_PRIVATEKEY							= Path to Private Key File
SCPPUBLISHER_SCP_KNOWNHOSTS							= Path to Known Hosts File
SCPPUBLISHER_SCP_PRIVATEKEY_PASSWORD				= Password to Private Key File (may be blank)
SCPPUBLISHER_SIGNING_CA_ID							= CA to Sign Published Certificate/CRL

#-- Certificate and CRL Reader Worker Plugin
CERTIFICATECRLREADER_CERTIFICATE_DIRECTORY 			= Local Directory containing Certificates
CERTIFICATECRLREADER_CRL_DIRECTORY					= Local Directory containing CRLs
CERTIFICATECRLREADER_SIGNING_CA_ID				    = Signing CA (if any)

### EOF
