<model>
    <mount>/ca+</mount>
    <version>1.0.0</version>
    <items>
        <ca type=".\CAsField">
            <refid type="TextField"/>
            <descr type="DescriptionField">
                <Required>Y</Required>
            </descr>
            <crt type="TextField"/>
            <prv type="TextField"/>
            <serial type="IntegerField"/>
            <caref type="CertificateField">
                <type>ca</type>
                <BlankDesc>self-signed</BlankDesc>
                <ValidationMessage>Please select a valid certificate from the list</ValidationMessage>
            </caref>
            <action type="OptionField" volatile="true">
                <Default>internal</Default>
                <Required>Y</Required>
                <OptionValues>
                    <existing>Import an existing Certificate Authority</existing>
                    <internal>Create an internal Certificate Authority</internal>
                    <ocsp>Create an OCSP signing certificate</ocsp>
                </OptionValues>
            </action>
            <key_type type="OptionField" volatile="true">
                <Required>Y</Required>
                <Default>2048</Default>
                <OptionValues>
                    <RSA-512 value='512'>RSA-512</RSA-512>
                    <RSA-1024 value='1024'>RSA-1024</RSA-1024>
                    <RSA-2048 value='2048'>RSA-2048</RSA-2048>
                    <RSA-3072 value='3072'>RSA-3072</RSA-3072>
                    <RSA-4096 value='4096'>RSA-4096</RSA-4096>
                    <RSA-8192 value='8192'>RSA-8192</RSA-8192>
                    <prime256v1>Elliptic Curve prime256v1</prime256v1>
                    <secp384r1>Elliptic Curve secp384r1</secp384r1>
                    <secp521r1>Elliptic Curve secp521r1</secp521r1>
                </OptionValues>
            </key_type>
            <digest type="OptionField" volatile="true">
                <Required>Y</Required>
                <Default>sha256</Default>
                <OptionValues>
                    <sha1>SHA1</sha1>
                    <sha224>SHA224</sha224>
                    <sha256>SHA256</sha256>
                    <sha384>SHA384</sha384>
                    <sha512>SHA512</sha512>
                </OptionValues>
            </digest>
            <lifetime type="IntegerField" volatile="true">
                <Required>Y</Required>
                <Default>825</Default>
            </lifetime>
            <city type="TextField" volatile="true">
                <Mask>/^[^\x00-\x08\x0b\x0c\x0e-\x1f\n]*$/</Mask>
            </city>
            <state type="TextField" volatile="true">
                <Mask>/^[^\x00-\x08\x0b\x0c\x0e-\x1f\n]*$/</Mask>
            </state>
            <organization type="TextField" volatile="true">
                <Mask>/^[^\x00-\x08\x0b\x0c\x0e-\x1f\n]*$/</Mask>
            </organization>
            <organizationalunit type="TextField" volatile="true">
                <Mask>/^[^\x00-\x08\x0b\x0c\x0e-\x1f\n]*$/</Mask>
            </organizationalunit>
            <country type="CountryField" volatile="true">
                <Mask>/^[^\x00-\x08\x0b\x0c\x0e-\x1f\n]*$/</Mask>
                <Default>NL</Default>
                <Required>Y</Required>
            </country>
            <email type="TextField" volatile="true">
                <Mask>/^[^\x00-\x08\x0b\x0c\x0e-\x1f\n]*$/</Mask>
            </email>
            <commonname type="TextField" volatile="true">
                <Mask>/^[^\x00-\x08\x0b\x0c\x0e-\x1f\n]*$/</Mask>
            </commonname>
            <ocsp_uri type="UrlField" volatile="true"/>
            <crt_payload type="TextField" volatile="true"/>
            <prv_payload type="TextField" volatile="true"/>
            <refcount type="IntegerField" volatile="true"/>

            <name type="TextField" volatile="true"/>
            <valid_from type="TextField" volatile="true"/>
            <valid_to type="TextField" volatile="true"/>
        </ca>
    </items>
</model>
