{{define "title"}} - Certificate: {{.Cert.Serial}}{{end}}
{{define "content"}}
<div class="page-header">
    <h2>Certificate: {{.Cert.CommonName}}{{if .Cert.Revoked}} <span style="color:#c0392b;">[REVOKED]</span>{{end}}</h2>
    <div class="page-meta">
        <a href="/pki/issuer/{{.Cert.Issuer}}">&larr; Issuer: {{.Cert.Issuer}}</a>
        &ensp;&middot;&ensp;
        <a href="/pki/cert/{{.Cert.Serial}}/download">Download Certificate (PEM)</a>
    </div>
</div>

<div class="card">
    <div class="card-title">Certificate Details</div>
    <table class="kv-table">
        <tbody>
            <tr><th>Serial</th><td><code>{{.Cert.Serial}}</code></td></tr>
            <tr><th>Common Name</th><td>{{.Cert.CommonName}}</td></tr>
            <tr><th>Issuer</th><td>{{.Cert.Issuer}}</td></tr>
            <tr><th>Profile</th><td>{{.Cert.Profile}}</td></tr>
            {{if .Cert.SANs}}
            <tr><th>SANs</th><td>{{range $i, $san := .Cert.SANs}}{{if $i}}, {{end}}{{$san}}{{end}}</td></tr>
            {{end}}
            <tr><th>Issued By</th><td>{{.Cert.IssuedBy}}</td></tr>
            <tr><th>Issued At</th><td>{{.Cert.IssuedAt}}</td></tr>
            <tr><th>Expires At</th><td>{{.Cert.ExpiresAt}}</td></tr>
            {{if .Cert.Revoked}}
            <tr><th>Revoked At</th><td>{{.Cert.RevokedAt}}</td></tr>
            <tr><th>Revoked By</th><td>{{.Cert.RevokedBy}}</td></tr>
            {{end}}
        </tbody>
    </table>
</div>

<div class="card">
    <div class="card-title">Certificate PEM</div>
    <div class="form-group">
        <textarea rows="12" class="pem-input" readonly>{{.Cert.CertPEM}}</textarea>
    </div>
</div>

{{if .IsAdmin}}
<div class="card">
    <div class="card-title">Admin Actions</div>
    <div style="display:flex;gap:1rem;flex-wrap:wrap;">
        {{if not .Cert.Revoked}}
        <form method="POST" action="/pki/cert/{{.Cert.Serial}}/revoke"
              onsubmit="return confirm('Revoke certificate {{.Cert.Serial}}? This cannot be undone.');">
            {{csrfField}}
            <button type="submit" class="btn btn-danger">Revoke Certificate</button>
        </form>
        {{end}}
        <form method="POST" action="/pki/cert/{{.Cert.Serial}}/delete"
              onsubmit="return confirm('Permanently delete certificate record {{.Cert.Serial}}? This cannot be undone.');">
            {{csrfField}}
            <button type="submit" class="btn btn-danger">Delete Record</button>
        </form>
    </div>
</div>
{{end}}
{{end}}