/*
 * Copyright 2020 Google LLC
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     https://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
// Generated by the protocol buffer compiler.  DO NOT EDIT!
// source: google/cloud/security/privateca/v1/resources.proto

package com.google.cloud.security.privateca.v1;

/**
 *
 *
 * <pre>
 * A
 * [CertificateDescription][google.cloud.security.privateca.v1.CertificateDescription]
 * describes an X.509 certificate or CSR that has been issued, as an alternative
 * to using ASN.1 / X.509.
 * </pre>
 *
 * Protobuf type {@code google.cloud.security.privateca.v1.CertificateDescription}
 */
public final class CertificateDescription extends com.google.protobuf.GeneratedMessageV3
    implements
    // @@protoc_insertion_point(message_implements:google.cloud.security.privateca.v1.CertificateDescription)
    CertificateDescriptionOrBuilder {
  private static final long serialVersionUID = 0L;
  // Use CertificateDescription.newBuilder() to construct.
  private CertificateDescription(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
    super(builder);
  }

  private CertificateDescription() {
    crlDistributionPoints_ = com.google.protobuf.LazyStringArrayList.EMPTY;
    aiaIssuingCertificateUrls_ = com.google.protobuf.LazyStringArrayList.EMPTY;
  }

  @java.lang.Override
  @SuppressWarnings({"unused"})
  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
    return new CertificateDescription();
  }

  @java.lang.Override
  public final com.google.protobuf.UnknownFieldSet getUnknownFields() {
    return this.unknownFields;
  }

  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
        .internal_static_google_cloud_security_privateca_v1_CertificateDescription_descriptor;
  }

  @java.lang.Override
  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
      internalGetFieldAccessorTable() {
    return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
        .internal_static_google_cloud_security_privateca_v1_CertificateDescription_fieldAccessorTable
        .ensureFieldAccessorsInitialized(
            com.google.cloud.security.privateca.v1.CertificateDescription.class,
            com.google.cloud.security.privateca.v1.CertificateDescription.Builder.class);
  }

  public interface SubjectDescriptionOrBuilder
      extends
      // @@protoc_insertion_point(interface_extends:google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription)
      com.google.protobuf.MessageOrBuilder {

    /**
     *
     *
     * <pre>
     * Contains distinguished name fields such as the common name, location and
     * / organization.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
     *
     * @return Whether the subject field is set.
     */
    boolean hasSubject();
    /**
     *
     *
     * <pre>
     * Contains distinguished name fields such as the common name, location and
     * / organization.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
     *
     * @return The subject.
     */
    com.google.cloud.security.privateca.v1.Subject getSubject();
    /**
     *
     *
     * <pre>
     * Contains distinguished name fields such as the common name, location and
     * / organization.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
     */
    com.google.cloud.security.privateca.v1.SubjectOrBuilder getSubjectOrBuilder();

    /**
     *
     *
     * <pre>
     * The subject alternative name fields.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
     *
     * @return Whether the subjectAltName field is set.
     */
    boolean hasSubjectAltName();
    /**
     *
     *
     * <pre>
     * The subject alternative name fields.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
     *
     * @return The subjectAltName.
     */
    com.google.cloud.security.privateca.v1.SubjectAltNames getSubjectAltName();
    /**
     *
     *
     * <pre>
     * The subject alternative name fields.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
     */
    com.google.cloud.security.privateca.v1.SubjectAltNamesOrBuilder getSubjectAltNameOrBuilder();

    /**
     *
     *
     * <pre>
     * The serial number encoded in lowercase hexadecimal.
     * </pre>
     *
     * <code>string hex_serial_number = 3;</code>
     *
     * @return The hexSerialNumber.
     */
    java.lang.String getHexSerialNumber();
    /**
     *
     *
     * <pre>
     * The serial number encoded in lowercase hexadecimal.
     * </pre>
     *
     * <code>string hex_serial_number = 3;</code>
     *
     * @return The bytes for hexSerialNumber.
     */
    com.google.protobuf.ByteString getHexSerialNumberBytes();

    /**
     *
     *
     * <pre>
     * For convenience, the actual lifetime of an issued certificate.
     * </pre>
     *
     * <code>.google.protobuf.Duration lifetime = 4;</code>
     *
     * @return Whether the lifetime field is set.
     */
    boolean hasLifetime();
    /**
     *
     *
     * <pre>
     * For convenience, the actual lifetime of an issued certificate.
     * </pre>
     *
     * <code>.google.protobuf.Duration lifetime = 4;</code>
     *
     * @return The lifetime.
     */
    com.google.protobuf.Duration getLifetime();
    /**
     *
     *
     * <pre>
     * For convenience, the actual lifetime of an issued certificate.
     * </pre>
     *
     * <code>.google.protobuf.Duration lifetime = 4;</code>
     */
    com.google.protobuf.DurationOrBuilder getLifetimeOrBuilder();

    /**
     *
     *
     * <pre>
     * The time at which the certificate becomes valid.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
     *
     * @return Whether the notBeforeTime field is set.
     */
    boolean hasNotBeforeTime();
    /**
     *
     *
     * <pre>
     * The time at which the certificate becomes valid.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
     *
     * @return The notBeforeTime.
     */
    com.google.protobuf.Timestamp getNotBeforeTime();
    /**
     *
     *
     * <pre>
     * The time at which the certificate becomes valid.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
     */
    com.google.protobuf.TimestampOrBuilder getNotBeforeTimeOrBuilder();

    /**
     *
     *
     * <pre>
     * The time after which the certificate is expired.
     * Per RFC 5280, the validity period for a certificate is the period of time
     * from not_before_time through not_after_time, inclusive.
     * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
     *
     * @return Whether the notAfterTime field is set.
     */
    boolean hasNotAfterTime();
    /**
     *
     *
     * <pre>
     * The time after which the certificate is expired.
     * Per RFC 5280, the validity period for a certificate is the period of time
     * from not_before_time through not_after_time, inclusive.
     * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
     *
     * @return The notAfterTime.
     */
    com.google.protobuf.Timestamp getNotAfterTime();
    /**
     *
     *
     * <pre>
     * The time after which the certificate is expired.
     * Per RFC 5280, the validity period for a certificate is the period of time
     * from not_before_time through not_after_time, inclusive.
     * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
     */
    com.google.protobuf.TimestampOrBuilder getNotAfterTimeOrBuilder();
  }
  /**
   *
   *
   * <pre>
   * These values describe fields in an issued X.509 certificate such as the
   * distinguished name, subject alternative names, serial number, and lifetime.
   * </pre>
   *
   * Protobuf type {@code
   * google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription}
   */
  public static final class SubjectDescription extends com.google.protobuf.GeneratedMessageV3
      implements
      // @@protoc_insertion_point(message_implements:google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription)
      SubjectDescriptionOrBuilder {
    private static final long serialVersionUID = 0L;
    // Use SubjectDescription.newBuilder() to construct.
    private SubjectDescription(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
      super(builder);
    }

    private SubjectDescription() {
      hexSerialNumber_ = "";
    }

    @java.lang.Override
    @SuppressWarnings({"unused"})
    protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
      return new SubjectDescription();
    }

    @java.lang.Override
    public final com.google.protobuf.UnknownFieldSet getUnknownFields() {
      return this.unknownFields;
    }

    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
          .internal_static_google_cloud_security_privateca_v1_CertificateDescription_SubjectDescription_descriptor;
    }

    @java.lang.Override
    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
        internalGetFieldAccessorTable() {
      return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
          .internal_static_google_cloud_security_privateca_v1_CertificateDescription_SubjectDescription_fieldAccessorTable
          .ensureFieldAccessorsInitialized(
              com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                  .class,
              com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                  .Builder.class);
    }

    public static final int SUBJECT_FIELD_NUMBER = 1;
    private com.google.cloud.security.privateca.v1.Subject subject_;
    /**
     *
     *
     * <pre>
     * Contains distinguished name fields such as the common name, location and
     * / organization.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
     *
     * @return Whether the subject field is set.
     */
    @java.lang.Override
    public boolean hasSubject() {
      return subject_ != null;
    }
    /**
     *
     *
     * <pre>
     * Contains distinguished name fields such as the common name, location and
     * / organization.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
     *
     * @return The subject.
     */
    @java.lang.Override
    public com.google.cloud.security.privateca.v1.Subject getSubject() {
      return subject_ == null
          ? com.google.cloud.security.privateca.v1.Subject.getDefaultInstance()
          : subject_;
    }
    /**
     *
     *
     * <pre>
     * Contains distinguished name fields such as the common name, location and
     * / organization.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
     */
    @java.lang.Override
    public com.google.cloud.security.privateca.v1.SubjectOrBuilder getSubjectOrBuilder() {
      return subject_ == null
          ? com.google.cloud.security.privateca.v1.Subject.getDefaultInstance()
          : subject_;
    }

    public static final int SUBJECT_ALT_NAME_FIELD_NUMBER = 2;
    private com.google.cloud.security.privateca.v1.SubjectAltNames subjectAltName_;
    /**
     *
     *
     * <pre>
     * The subject alternative name fields.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
     *
     * @return Whether the subjectAltName field is set.
     */
    @java.lang.Override
    public boolean hasSubjectAltName() {
      return subjectAltName_ != null;
    }
    /**
     *
     *
     * <pre>
     * The subject alternative name fields.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
     *
     * @return The subjectAltName.
     */
    @java.lang.Override
    public com.google.cloud.security.privateca.v1.SubjectAltNames getSubjectAltName() {
      return subjectAltName_ == null
          ? com.google.cloud.security.privateca.v1.SubjectAltNames.getDefaultInstance()
          : subjectAltName_;
    }
    /**
     *
     *
     * <pre>
     * The subject alternative name fields.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
     */
    @java.lang.Override
    public com.google.cloud.security.privateca.v1.SubjectAltNamesOrBuilder
        getSubjectAltNameOrBuilder() {
      return subjectAltName_ == null
          ? com.google.cloud.security.privateca.v1.SubjectAltNames.getDefaultInstance()
          : subjectAltName_;
    }

    public static final int HEX_SERIAL_NUMBER_FIELD_NUMBER = 3;

    @SuppressWarnings("serial")
    private volatile java.lang.Object hexSerialNumber_ = "";
    /**
     *
     *
     * <pre>
     * The serial number encoded in lowercase hexadecimal.
     * </pre>
     *
     * <code>string hex_serial_number = 3;</code>
     *
     * @return The hexSerialNumber.
     */
    @java.lang.Override
    public java.lang.String getHexSerialNumber() {
      java.lang.Object ref = hexSerialNumber_;
      if (ref instanceof java.lang.String) {
        return (java.lang.String) ref;
      } else {
        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
        java.lang.String s = bs.toStringUtf8();
        hexSerialNumber_ = s;
        return s;
      }
    }
    /**
     *
     *
     * <pre>
     * The serial number encoded in lowercase hexadecimal.
     * </pre>
     *
     * <code>string hex_serial_number = 3;</code>
     *
     * @return The bytes for hexSerialNumber.
     */
    @java.lang.Override
    public com.google.protobuf.ByteString getHexSerialNumberBytes() {
      java.lang.Object ref = hexSerialNumber_;
      if (ref instanceof java.lang.String) {
        com.google.protobuf.ByteString b =
            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
        hexSerialNumber_ = b;
        return b;
      } else {
        return (com.google.protobuf.ByteString) ref;
      }
    }

    public static final int LIFETIME_FIELD_NUMBER = 4;
    private com.google.protobuf.Duration lifetime_;
    /**
     *
     *
     * <pre>
     * For convenience, the actual lifetime of an issued certificate.
     * </pre>
     *
     * <code>.google.protobuf.Duration lifetime = 4;</code>
     *
     * @return Whether the lifetime field is set.
     */
    @java.lang.Override
    public boolean hasLifetime() {
      return lifetime_ != null;
    }
    /**
     *
     *
     * <pre>
     * For convenience, the actual lifetime of an issued certificate.
     * </pre>
     *
     * <code>.google.protobuf.Duration lifetime = 4;</code>
     *
     * @return The lifetime.
     */
    @java.lang.Override
    public com.google.protobuf.Duration getLifetime() {
      return lifetime_ == null ? com.google.protobuf.Duration.getDefaultInstance() : lifetime_;
    }
    /**
     *
     *
     * <pre>
     * For convenience, the actual lifetime of an issued certificate.
     * </pre>
     *
     * <code>.google.protobuf.Duration lifetime = 4;</code>
     */
    @java.lang.Override
    public com.google.protobuf.DurationOrBuilder getLifetimeOrBuilder() {
      return lifetime_ == null ? com.google.protobuf.Duration.getDefaultInstance() : lifetime_;
    }

    public static final int NOT_BEFORE_TIME_FIELD_NUMBER = 5;
    private com.google.protobuf.Timestamp notBeforeTime_;
    /**
     *
     *
     * <pre>
     * The time at which the certificate becomes valid.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
     *
     * @return Whether the notBeforeTime field is set.
     */
    @java.lang.Override
    public boolean hasNotBeforeTime() {
      return notBeforeTime_ != null;
    }
    /**
     *
     *
     * <pre>
     * The time at which the certificate becomes valid.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
     *
     * @return The notBeforeTime.
     */
    @java.lang.Override
    public com.google.protobuf.Timestamp getNotBeforeTime() {
      return notBeforeTime_ == null
          ? com.google.protobuf.Timestamp.getDefaultInstance()
          : notBeforeTime_;
    }
    /**
     *
     *
     * <pre>
     * The time at which the certificate becomes valid.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
     */
    @java.lang.Override
    public com.google.protobuf.TimestampOrBuilder getNotBeforeTimeOrBuilder() {
      return notBeforeTime_ == null
          ? com.google.protobuf.Timestamp.getDefaultInstance()
          : notBeforeTime_;
    }

    public static final int NOT_AFTER_TIME_FIELD_NUMBER = 6;
    private com.google.protobuf.Timestamp notAfterTime_;
    /**
     *
     *
     * <pre>
     * The time after which the certificate is expired.
     * Per RFC 5280, the validity period for a certificate is the period of time
     * from not_before_time through not_after_time, inclusive.
     * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
     *
     * @return Whether the notAfterTime field is set.
     */
    @java.lang.Override
    public boolean hasNotAfterTime() {
      return notAfterTime_ != null;
    }
    /**
     *
     *
     * <pre>
     * The time after which the certificate is expired.
     * Per RFC 5280, the validity period for a certificate is the period of time
     * from not_before_time through not_after_time, inclusive.
     * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
     *
     * @return The notAfterTime.
     */
    @java.lang.Override
    public com.google.protobuf.Timestamp getNotAfterTime() {
      return notAfterTime_ == null
          ? com.google.protobuf.Timestamp.getDefaultInstance()
          : notAfterTime_;
    }
    /**
     *
     *
     * <pre>
     * The time after which the certificate is expired.
     * Per RFC 5280, the validity period for a certificate is the period of time
     * from not_before_time through not_after_time, inclusive.
     * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
     * </pre>
     *
     * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
     */
    @java.lang.Override
    public com.google.protobuf.TimestampOrBuilder getNotAfterTimeOrBuilder() {
      return notAfterTime_ == null
          ? com.google.protobuf.Timestamp.getDefaultInstance()
          : notAfterTime_;
    }

    private byte memoizedIsInitialized = -1;

    @java.lang.Override
    public final boolean isInitialized() {
      byte isInitialized = memoizedIsInitialized;
      if (isInitialized == 1) return true;
      if (isInitialized == 0) return false;

      memoizedIsInitialized = 1;
      return true;
    }

    @java.lang.Override
    public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
      if (subject_ != null) {
        output.writeMessage(1, getSubject());
      }
      if (subjectAltName_ != null) {
        output.writeMessage(2, getSubjectAltName());
      }
      if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(hexSerialNumber_)) {
        com.google.protobuf.GeneratedMessageV3.writeString(output, 3, hexSerialNumber_);
      }
      if (lifetime_ != null) {
        output.writeMessage(4, getLifetime());
      }
      if (notBeforeTime_ != null) {
        output.writeMessage(5, getNotBeforeTime());
      }
      if (notAfterTime_ != null) {
        output.writeMessage(6, getNotAfterTime());
      }
      getUnknownFields().writeTo(output);
    }

    @java.lang.Override
    public int getSerializedSize() {
      int size = memoizedSize;
      if (size != -1) return size;

      size = 0;
      if (subject_ != null) {
        size += com.google.protobuf.CodedOutputStream.computeMessageSize(1, getSubject());
      }
      if (subjectAltName_ != null) {
        size += com.google.protobuf.CodedOutputStream.computeMessageSize(2, getSubjectAltName());
      }
      if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(hexSerialNumber_)) {
        size += com.google.protobuf.GeneratedMessageV3.computeStringSize(3, hexSerialNumber_);
      }
      if (lifetime_ != null) {
        size += com.google.protobuf.CodedOutputStream.computeMessageSize(4, getLifetime());
      }
      if (notBeforeTime_ != null) {
        size += com.google.protobuf.CodedOutputStream.computeMessageSize(5, getNotBeforeTime());
      }
      if (notAfterTime_ != null) {
        size += com.google.protobuf.CodedOutputStream.computeMessageSize(6, getNotAfterTime());
      }
      size += getUnknownFields().getSerializedSize();
      memoizedSize = size;
      return size;
    }

    @java.lang.Override
    public boolean equals(final java.lang.Object obj) {
      if (obj == this) {
        return true;
      }
      if (!(obj
          instanceof
          com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription)) {
        return super.equals(obj);
      }
      com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription other =
          (com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription) obj;

      if (hasSubject() != other.hasSubject()) return false;
      if (hasSubject()) {
        if (!getSubject().equals(other.getSubject())) return false;
      }
      if (hasSubjectAltName() != other.hasSubjectAltName()) return false;
      if (hasSubjectAltName()) {
        if (!getSubjectAltName().equals(other.getSubjectAltName())) return false;
      }
      if (!getHexSerialNumber().equals(other.getHexSerialNumber())) return false;
      if (hasLifetime() != other.hasLifetime()) return false;
      if (hasLifetime()) {
        if (!getLifetime().equals(other.getLifetime())) return false;
      }
      if (hasNotBeforeTime() != other.hasNotBeforeTime()) return false;
      if (hasNotBeforeTime()) {
        if (!getNotBeforeTime().equals(other.getNotBeforeTime())) return false;
      }
      if (hasNotAfterTime() != other.hasNotAfterTime()) return false;
      if (hasNotAfterTime()) {
        if (!getNotAfterTime().equals(other.getNotAfterTime())) return false;
      }
      if (!getUnknownFields().equals(other.getUnknownFields())) return false;
      return true;
    }

    @java.lang.Override
    public int hashCode() {
      if (memoizedHashCode != 0) {
        return memoizedHashCode;
      }
      int hash = 41;
      hash = (19 * hash) + getDescriptor().hashCode();
      if (hasSubject()) {
        hash = (37 * hash) + SUBJECT_FIELD_NUMBER;
        hash = (53 * hash) + getSubject().hashCode();
      }
      if (hasSubjectAltName()) {
        hash = (37 * hash) + SUBJECT_ALT_NAME_FIELD_NUMBER;
        hash = (53 * hash) + getSubjectAltName().hashCode();
      }
      hash = (37 * hash) + HEX_SERIAL_NUMBER_FIELD_NUMBER;
      hash = (53 * hash) + getHexSerialNumber().hashCode();
      if (hasLifetime()) {
        hash = (37 * hash) + LIFETIME_FIELD_NUMBER;
        hash = (53 * hash) + getLifetime().hashCode();
      }
      if (hasNotBeforeTime()) {
        hash = (37 * hash) + NOT_BEFORE_TIME_FIELD_NUMBER;
        hash = (53 * hash) + getNotBeforeTime().hashCode();
      }
      if (hasNotAfterTime()) {
        hash = (37 * hash) + NOT_AFTER_TIME_FIELD_NUMBER;
        hash = (53 * hash) + getNotAfterTime().hashCode();
      }
      hash = (29 * hash) + getUnknownFields().hashCode();
      memoizedHashCode = hash;
      return hash;
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(java.nio.ByteBuffer data)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(
            java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(com.google.protobuf.ByteString data)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(
            com.google.protobuf.ByteString data,
            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(java.io.InputStream input) throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(
            java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
          PARSER, input, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseDelimitedFrom(
            java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
          PARSER, input, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(com.google.protobuf.CodedInputStream input) throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        parseFrom(
            com.google.protobuf.CodedInputStream input,
            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
          PARSER, input, extensionRegistry);
    }

    @java.lang.Override
    public Builder newBuilderForType() {
      return newBuilder();
    }

    public static Builder newBuilder() {
      return DEFAULT_INSTANCE.toBuilder();
    }

    public static Builder newBuilder(
        com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
            prototype) {
      return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
    }

    @java.lang.Override
    public Builder toBuilder() {
      return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
    }

    @java.lang.Override
    protected Builder newBuilderForType(
        com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
      Builder builder = new Builder(parent);
      return builder;
    }
    /**
     *
     *
     * <pre>
     * These values describe fields in an issued X.509 certificate such as the
     * distinguished name, subject alternative names, serial number, and lifetime.
     * </pre>
     *
     * Protobuf type {@code
     * google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription}
     */
    public static final class Builder
        extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
        implements
        // @@protoc_insertion_point(builder_implements:google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription)
        com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescriptionOrBuilder {
      public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
        return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
            .internal_static_google_cloud_security_privateca_v1_CertificateDescription_SubjectDescription_descriptor;
      }

      @java.lang.Override
      protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
          internalGetFieldAccessorTable() {
        return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
            .internal_static_google_cloud_security_privateca_v1_CertificateDescription_SubjectDescription_fieldAccessorTable
            .ensureFieldAccessorsInitialized(
                com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                    .class,
                com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                    .Builder.class);
      }

      // Construct using
      // com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription.newBuilder()
      private Builder() {}

      private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
        super(parent);
      }

      @java.lang.Override
      public Builder clear() {
        super.clear();
        bitField0_ = 0;
        subject_ = null;
        if (subjectBuilder_ != null) {
          subjectBuilder_.dispose();
          subjectBuilder_ = null;
        }
        subjectAltName_ = null;
        if (subjectAltNameBuilder_ != null) {
          subjectAltNameBuilder_.dispose();
          subjectAltNameBuilder_ = null;
        }
        hexSerialNumber_ = "";
        lifetime_ = null;
        if (lifetimeBuilder_ != null) {
          lifetimeBuilder_.dispose();
          lifetimeBuilder_ = null;
        }
        notBeforeTime_ = null;
        if (notBeforeTimeBuilder_ != null) {
          notBeforeTimeBuilder_.dispose();
          notBeforeTimeBuilder_ = null;
        }
        notAfterTime_ = null;
        if (notAfterTimeBuilder_ != null) {
          notAfterTimeBuilder_.dispose();
          notAfterTimeBuilder_ = null;
        }
        return this;
      }

      @java.lang.Override
      public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
        return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
            .internal_static_google_cloud_security_privateca_v1_CertificateDescription_SubjectDescription_descriptor;
      }

      @java.lang.Override
      public com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
          getDefaultInstanceForType() {
        return com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
            .getDefaultInstance();
      }

      @java.lang.Override
      public com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
          build() {
        com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription result =
            buildPartial();
        if (!result.isInitialized()) {
          throw newUninitializedMessageException(result);
        }
        return result;
      }

      @java.lang.Override
      public com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
          buildPartial() {
        com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription result =
            new com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription(
                this);
        if (bitField0_ != 0) {
          buildPartial0(result);
        }
        onBuilt();
        return result;
      }

      private void buildPartial0(
          com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription result) {
        int from_bitField0_ = bitField0_;
        if (((from_bitField0_ & 0x00000001) != 0)) {
          result.subject_ = subjectBuilder_ == null ? subject_ : subjectBuilder_.build();
        }
        if (((from_bitField0_ & 0x00000002) != 0)) {
          result.subjectAltName_ =
              subjectAltNameBuilder_ == null ? subjectAltName_ : subjectAltNameBuilder_.build();
        }
        if (((from_bitField0_ & 0x00000004) != 0)) {
          result.hexSerialNumber_ = hexSerialNumber_;
        }
        if (((from_bitField0_ & 0x00000008) != 0)) {
          result.lifetime_ = lifetimeBuilder_ == null ? lifetime_ : lifetimeBuilder_.build();
        }
        if (((from_bitField0_ & 0x00000010) != 0)) {
          result.notBeforeTime_ =
              notBeforeTimeBuilder_ == null ? notBeforeTime_ : notBeforeTimeBuilder_.build();
        }
        if (((from_bitField0_ & 0x00000020) != 0)) {
          result.notAfterTime_ =
              notAfterTimeBuilder_ == null ? notAfterTime_ : notAfterTimeBuilder_.build();
        }
      }

      @java.lang.Override
      public Builder clone() {
        return super.clone();
      }

      @java.lang.Override
      public Builder setField(
          com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
        return super.setField(field, value);
      }

      @java.lang.Override
      public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
        return super.clearField(field);
      }

      @java.lang.Override
      public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
        return super.clearOneof(oneof);
      }

      @java.lang.Override
      public Builder setRepeatedField(
          com.google.protobuf.Descriptors.FieldDescriptor field,
          int index,
          java.lang.Object value) {
        return super.setRepeatedField(field, index, value);
      }

      @java.lang.Override
      public Builder addRepeatedField(
          com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
        return super.addRepeatedField(field, value);
      }

      @java.lang.Override
      public Builder mergeFrom(com.google.protobuf.Message other) {
        if (other
            instanceof
            com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription) {
          return mergeFrom(
              (com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription)
                  other);
        } else {
          super.mergeFrom(other);
          return this;
        }
      }

      public Builder mergeFrom(
          com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription other) {
        if (other
            == com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                .getDefaultInstance()) return this;
        if (other.hasSubject()) {
          mergeSubject(other.getSubject());
        }
        if (other.hasSubjectAltName()) {
          mergeSubjectAltName(other.getSubjectAltName());
        }
        if (!other.getHexSerialNumber().isEmpty()) {
          hexSerialNumber_ = other.hexSerialNumber_;
          bitField0_ |= 0x00000004;
          onChanged();
        }
        if (other.hasLifetime()) {
          mergeLifetime(other.getLifetime());
        }
        if (other.hasNotBeforeTime()) {
          mergeNotBeforeTime(other.getNotBeforeTime());
        }
        if (other.hasNotAfterTime()) {
          mergeNotAfterTime(other.getNotAfterTime());
        }
        this.mergeUnknownFields(other.getUnknownFields());
        onChanged();
        return this;
      }

      @java.lang.Override
      public final boolean isInitialized() {
        return true;
      }

      @java.lang.Override
      public Builder mergeFrom(
          com.google.protobuf.CodedInputStream input,
          com.google.protobuf.ExtensionRegistryLite extensionRegistry)
          throws java.io.IOException {
        if (extensionRegistry == null) {
          throw new java.lang.NullPointerException();
        }
        try {
          boolean done = false;
          while (!done) {
            int tag = input.readTag();
            switch (tag) {
              case 0:
                done = true;
                break;
              case 10:
                {
                  input.readMessage(getSubjectFieldBuilder().getBuilder(), extensionRegistry);
                  bitField0_ |= 0x00000001;
                  break;
                } // case 10
              case 18:
                {
                  input.readMessage(
                      getSubjectAltNameFieldBuilder().getBuilder(), extensionRegistry);
                  bitField0_ |= 0x00000002;
                  break;
                } // case 18
              case 26:
                {
                  hexSerialNumber_ = input.readStringRequireUtf8();
                  bitField0_ |= 0x00000004;
                  break;
                } // case 26
              case 34:
                {
                  input.readMessage(getLifetimeFieldBuilder().getBuilder(), extensionRegistry);
                  bitField0_ |= 0x00000008;
                  break;
                } // case 34
              case 42:
                {
                  input.readMessage(getNotBeforeTimeFieldBuilder().getBuilder(), extensionRegistry);
                  bitField0_ |= 0x00000010;
                  break;
                } // case 42
              case 50:
                {
                  input.readMessage(getNotAfterTimeFieldBuilder().getBuilder(), extensionRegistry);
                  bitField0_ |= 0x00000020;
                  break;
                } // case 50
              default:
                {
                  if (!super.parseUnknownField(input, extensionRegistry, tag)) {
                    done = true; // was an endgroup tag
                  }
                  break;
                } // default:
            } // switch (tag)
          } // while (!done)
        } catch (com.google.protobuf.InvalidProtocolBufferException e) {
          throw e.unwrapIOException();
        } finally {
          onChanged();
        } // finally
        return this;
      }

      private int bitField0_;

      private com.google.cloud.security.privateca.v1.Subject subject_;
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.cloud.security.privateca.v1.Subject,
              com.google.cloud.security.privateca.v1.Subject.Builder,
              com.google.cloud.security.privateca.v1.SubjectOrBuilder>
          subjectBuilder_;
      /**
       *
       *
       * <pre>
       * Contains distinguished name fields such as the common name, location and
       * / organization.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
       *
       * @return Whether the subject field is set.
       */
      public boolean hasSubject() {
        return ((bitField0_ & 0x00000001) != 0);
      }
      /**
       *
       *
       * <pre>
       * Contains distinguished name fields such as the common name, location and
       * / organization.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
       *
       * @return The subject.
       */
      public com.google.cloud.security.privateca.v1.Subject getSubject() {
        if (subjectBuilder_ == null) {
          return subject_ == null
              ? com.google.cloud.security.privateca.v1.Subject.getDefaultInstance()
              : subject_;
        } else {
          return subjectBuilder_.getMessage();
        }
      }
      /**
       *
       *
       * <pre>
       * Contains distinguished name fields such as the common name, location and
       * / organization.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
       */
      public Builder setSubject(com.google.cloud.security.privateca.v1.Subject value) {
        if (subjectBuilder_ == null) {
          if (value == null) {
            throw new NullPointerException();
          }
          subject_ = value;
        } else {
          subjectBuilder_.setMessage(value);
        }
        bitField0_ |= 0x00000001;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * Contains distinguished name fields such as the common name, location and
       * / organization.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
       */
      public Builder setSubject(
          com.google.cloud.security.privateca.v1.Subject.Builder builderForValue) {
        if (subjectBuilder_ == null) {
          subject_ = builderForValue.build();
        } else {
          subjectBuilder_.setMessage(builderForValue.build());
        }
        bitField0_ |= 0x00000001;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * Contains distinguished name fields such as the common name, location and
       * / organization.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
       */
      public Builder mergeSubject(com.google.cloud.security.privateca.v1.Subject value) {
        if (subjectBuilder_ == null) {
          if (((bitField0_ & 0x00000001) != 0)
              && subject_ != null
              && subject_ != com.google.cloud.security.privateca.v1.Subject.getDefaultInstance()) {
            getSubjectBuilder().mergeFrom(value);
          } else {
            subject_ = value;
          }
        } else {
          subjectBuilder_.mergeFrom(value);
        }
        bitField0_ |= 0x00000001;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * Contains distinguished name fields such as the common name, location and
       * / organization.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
       */
      public Builder clearSubject() {
        bitField0_ = (bitField0_ & ~0x00000001);
        subject_ = null;
        if (subjectBuilder_ != null) {
          subjectBuilder_.dispose();
          subjectBuilder_ = null;
        }
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * Contains distinguished name fields such as the common name, location and
       * / organization.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
       */
      public com.google.cloud.security.privateca.v1.Subject.Builder getSubjectBuilder() {
        bitField0_ |= 0x00000001;
        onChanged();
        return getSubjectFieldBuilder().getBuilder();
      }
      /**
       *
       *
       * <pre>
       * Contains distinguished name fields such as the common name, location and
       * / organization.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
       */
      public com.google.cloud.security.privateca.v1.SubjectOrBuilder getSubjectOrBuilder() {
        if (subjectBuilder_ != null) {
          return subjectBuilder_.getMessageOrBuilder();
        } else {
          return subject_ == null
              ? com.google.cloud.security.privateca.v1.Subject.getDefaultInstance()
              : subject_;
        }
      }
      /**
       *
       *
       * <pre>
       * Contains distinguished name fields such as the common name, location and
       * / organization.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.Subject subject = 1;</code>
       */
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.cloud.security.privateca.v1.Subject,
              com.google.cloud.security.privateca.v1.Subject.Builder,
              com.google.cloud.security.privateca.v1.SubjectOrBuilder>
          getSubjectFieldBuilder() {
        if (subjectBuilder_ == null) {
          subjectBuilder_ =
              new com.google.protobuf.SingleFieldBuilderV3<
                  com.google.cloud.security.privateca.v1.Subject,
                  com.google.cloud.security.privateca.v1.Subject.Builder,
                  com.google.cloud.security.privateca.v1.SubjectOrBuilder>(
                  getSubject(), getParentForChildren(), isClean());
          subject_ = null;
        }
        return subjectBuilder_;
      }

      private com.google.cloud.security.privateca.v1.SubjectAltNames subjectAltName_;
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.cloud.security.privateca.v1.SubjectAltNames,
              com.google.cloud.security.privateca.v1.SubjectAltNames.Builder,
              com.google.cloud.security.privateca.v1.SubjectAltNamesOrBuilder>
          subjectAltNameBuilder_;
      /**
       *
       *
       * <pre>
       * The subject alternative name fields.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
       *
       * @return Whether the subjectAltName field is set.
       */
      public boolean hasSubjectAltName() {
        return ((bitField0_ & 0x00000002) != 0);
      }
      /**
       *
       *
       * <pre>
       * The subject alternative name fields.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
       *
       * @return The subjectAltName.
       */
      public com.google.cloud.security.privateca.v1.SubjectAltNames getSubjectAltName() {
        if (subjectAltNameBuilder_ == null) {
          return subjectAltName_ == null
              ? com.google.cloud.security.privateca.v1.SubjectAltNames.getDefaultInstance()
              : subjectAltName_;
        } else {
          return subjectAltNameBuilder_.getMessage();
        }
      }
      /**
       *
       *
       * <pre>
       * The subject alternative name fields.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
       */
      public Builder setSubjectAltName(
          com.google.cloud.security.privateca.v1.SubjectAltNames value) {
        if (subjectAltNameBuilder_ == null) {
          if (value == null) {
            throw new NullPointerException();
          }
          subjectAltName_ = value;
        } else {
          subjectAltNameBuilder_.setMessage(value);
        }
        bitField0_ |= 0x00000002;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The subject alternative name fields.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
       */
      public Builder setSubjectAltName(
          com.google.cloud.security.privateca.v1.SubjectAltNames.Builder builderForValue) {
        if (subjectAltNameBuilder_ == null) {
          subjectAltName_ = builderForValue.build();
        } else {
          subjectAltNameBuilder_.setMessage(builderForValue.build());
        }
        bitField0_ |= 0x00000002;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The subject alternative name fields.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
       */
      public Builder mergeSubjectAltName(
          com.google.cloud.security.privateca.v1.SubjectAltNames value) {
        if (subjectAltNameBuilder_ == null) {
          if (((bitField0_ & 0x00000002) != 0)
              && subjectAltName_ != null
              && subjectAltName_
                  != com.google.cloud.security.privateca.v1.SubjectAltNames.getDefaultInstance()) {
            getSubjectAltNameBuilder().mergeFrom(value);
          } else {
            subjectAltName_ = value;
          }
        } else {
          subjectAltNameBuilder_.mergeFrom(value);
        }
        bitField0_ |= 0x00000002;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The subject alternative name fields.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
       */
      public Builder clearSubjectAltName() {
        bitField0_ = (bitField0_ & ~0x00000002);
        subjectAltName_ = null;
        if (subjectAltNameBuilder_ != null) {
          subjectAltNameBuilder_.dispose();
          subjectAltNameBuilder_ = null;
        }
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The subject alternative name fields.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
       */
      public com.google.cloud.security.privateca.v1.SubjectAltNames.Builder
          getSubjectAltNameBuilder() {
        bitField0_ |= 0x00000002;
        onChanged();
        return getSubjectAltNameFieldBuilder().getBuilder();
      }
      /**
       *
       *
       * <pre>
       * The subject alternative name fields.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
       */
      public com.google.cloud.security.privateca.v1.SubjectAltNamesOrBuilder
          getSubjectAltNameOrBuilder() {
        if (subjectAltNameBuilder_ != null) {
          return subjectAltNameBuilder_.getMessageOrBuilder();
        } else {
          return subjectAltName_ == null
              ? com.google.cloud.security.privateca.v1.SubjectAltNames.getDefaultInstance()
              : subjectAltName_;
        }
      }
      /**
       *
       *
       * <pre>
       * The subject alternative name fields.
       * </pre>
       *
       * <code>.google.cloud.security.privateca.v1.SubjectAltNames subject_alt_name = 2;</code>
       */
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.cloud.security.privateca.v1.SubjectAltNames,
              com.google.cloud.security.privateca.v1.SubjectAltNames.Builder,
              com.google.cloud.security.privateca.v1.SubjectAltNamesOrBuilder>
          getSubjectAltNameFieldBuilder() {
        if (subjectAltNameBuilder_ == null) {
          subjectAltNameBuilder_ =
              new com.google.protobuf.SingleFieldBuilderV3<
                  com.google.cloud.security.privateca.v1.SubjectAltNames,
                  com.google.cloud.security.privateca.v1.SubjectAltNames.Builder,
                  com.google.cloud.security.privateca.v1.SubjectAltNamesOrBuilder>(
                  getSubjectAltName(), getParentForChildren(), isClean());
          subjectAltName_ = null;
        }
        return subjectAltNameBuilder_;
      }

      private java.lang.Object hexSerialNumber_ = "";
      /**
       *
       *
       * <pre>
       * The serial number encoded in lowercase hexadecimal.
       * </pre>
       *
       * <code>string hex_serial_number = 3;</code>
       *
       * @return The hexSerialNumber.
       */
      public java.lang.String getHexSerialNumber() {
        java.lang.Object ref = hexSerialNumber_;
        if (!(ref instanceof java.lang.String)) {
          com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
          java.lang.String s = bs.toStringUtf8();
          hexSerialNumber_ = s;
          return s;
        } else {
          return (java.lang.String) ref;
        }
      }
      /**
       *
       *
       * <pre>
       * The serial number encoded in lowercase hexadecimal.
       * </pre>
       *
       * <code>string hex_serial_number = 3;</code>
       *
       * @return The bytes for hexSerialNumber.
       */
      public com.google.protobuf.ByteString getHexSerialNumberBytes() {
        java.lang.Object ref = hexSerialNumber_;
        if (ref instanceof String) {
          com.google.protobuf.ByteString b =
              com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
          hexSerialNumber_ = b;
          return b;
        } else {
          return (com.google.protobuf.ByteString) ref;
        }
      }
      /**
       *
       *
       * <pre>
       * The serial number encoded in lowercase hexadecimal.
       * </pre>
       *
       * <code>string hex_serial_number = 3;</code>
       *
       * @param value The hexSerialNumber to set.
       * @return This builder for chaining.
       */
      public Builder setHexSerialNumber(java.lang.String value) {
        if (value == null) {
          throw new NullPointerException();
        }
        hexSerialNumber_ = value;
        bitField0_ |= 0x00000004;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The serial number encoded in lowercase hexadecimal.
       * </pre>
       *
       * <code>string hex_serial_number = 3;</code>
       *
       * @return This builder for chaining.
       */
      public Builder clearHexSerialNumber() {
        hexSerialNumber_ = getDefaultInstance().getHexSerialNumber();
        bitField0_ = (bitField0_ & ~0x00000004);
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The serial number encoded in lowercase hexadecimal.
       * </pre>
       *
       * <code>string hex_serial_number = 3;</code>
       *
       * @param value The bytes for hexSerialNumber to set.
       * @return This builder for chaining.
       */
      public Builder setHexSerialNumberBytes(com.google.protobuf.ByteString value) {
        if (value == null) {
          throw new NullPointerException();
        }
        checkByteStringIsUtf8(value);
        hexSerialNumber_ = value;
        bitField0_ |= 0x00000004;
        onChanged();
        return this;
      }

      private com.google.protobuf.Duration lifetime_;
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.protobuf.Duration,
              com.google.protobuf.Duration.Builder,
              com.google.protobuf.DurationOrBuilder>
          lifetimeBuilder_;
      /**
       *
       *
       * <pre>
       * For convenience, the actual lifetime of an issued certificate.
       * </pre>
       *
       * <code>.google.protobuf.Duration lifetime = 4;</code>
       *
       * @return Whether the lifetime field is set.
       */
      public boolean hasLifetime() {
        return ((bitField0_ & 0x00000008) != 0);
      }
      /**
       *
       *
       * <pre>
       * For convenience, the actual lifetime of an issued certificate.
       * </pre>
       *
       * <code>.google.protobuf.Duration lifetime = 4;</code>
       *
       * @return The lifetime.
       */
      public com.google.protobuf.Duration getLifetime() {
        if (lifetimeBuilder_ == null) {
          return lifetime_ == null ? com.google.protobuf.Duration.getDefaultInstance() : lifetime_;
        } else {
          return lifetimeBuilder_.getMessage();
        }
      }
      /**
       *
       *
       * <pre>
       * For convenience, the actual lifetime of an issued certificate.
       * </pre>
       *
       * <code>.google.protobuf.Duration lifetime = 4;</code>
       */
      public Builder setLifetime(com.google.protobuf.Duration value) {
        if (lifetimeBuilder_ == null) {
          if (value == null) {
            throw new NullPointerException();
          }
          lifetime_ = value;
        } else {
          lifetimeBuilder_.setMessage(value);
        }
        bitField0_ |= 0x00000008;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * For convenience, the actual lifetime of an issued certificate.
       * </pre>
       *
       * <code>.google.protobuf.Duration lifetime = 4;</code>
       */
      public Builder setLifetime(com.google.protobuf.Duration.Builder builderForValue) {
        if (lifetimeBuilder_ == null) {
          lifetime_ = builderForValue.build();
        } else {
          lifetimeBuilder_.setMessage(builderForValue.build());
        }
        bitField0_ |= 0x00000008;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * For convenience, the actual lifetime of an issued certificate.
       * </pre>
       *
       * <code>.google.protobuf.Duration lifetime = 4;</code>
       */
      public Builder mergeLifetime(com.google.protobuf.Duration value) {
        if (lifetimeBuilder_ == null) {
          if (((bitField0_ & 0x00000008) != 0)
              && lifetime_ != null
              && lifetime_ != com.google.protobuf.Duration.getDefaultInstance()) {
            getLifetimeBuilder().mergeFrom(value);
          } else {
            lifetime_ = value;
          }
        } else {
          lifetimeBuilder_.mergeFrom(value);
        }
        bitField0_ |= 0x00000008;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * For convenience, the actual lifetime of an issued certificate.
       * </pre>
       *
       * <code>.google.protobuf.Duration lifetime = 4;</code>
       */
      public Builder clearLifetime() {
        bitField0_ = (bitField0_ & ~0x00000008);
        lifetime_ = null;
        if (lifetimeBuilder_ != null) {
          lifetimeBuilder_.dispose();
          lifetimeBuilder_ = null;
        }
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * For convenience, the actual lifetime of an issued certificate.
       * </pre>
       *
       * <code>.google.protobuf.Duration lifetime = 4;</code>
       */
      public com.google.protobuf.Duration.Builder getLifetimeBuilder() {
        bitField0_ |= 0x00000008;
        onChanged();
        return getLifetimeFieldBuilder().getBuilder();
      }
      /**
       *
       *
       * <pre>
       * For convenience, the actual lifetime of an issued certificate.
       * </pre>
       *
       * <code>.google.protobuf.Duration lifetime = 4;</code>
       */
      public com.google.protobuf.DurationOrBuilder getLifetimeOrBuilder() {
        if (lifetimeBuilder_ != null) {
          return lifetimeBuilder_.getMessageOrBuilder();
        } else {
          return lifetime_ == null ? com.google.protobuf.Duration.getDefaultInstance() : lifetime_;
        }
      }
      /**
       *
       *
       * <pre>
       * For convenience, the actual lifetime of an issued certificate.
       * </pre>
       *
       * <code>.google.protobuf.Duration lifetime = 4;</code>
       */
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.protobuf.Duration,
              com.google.protobuf.Duration.Builder,
              com.google.protobuf.DurationOrBuilder>
          getLifetimeFieldBuilder() {
        if (lifetimeBuilder_ == null) {
          lifetimeBuilder_ =
              new com.google.protobuf.SingleFieldBuilderV3<
                  com.google.protobuf.Duration,
                  com.google.protobuf.Duration.Builder,
                  com.google.protobuf.DurationOrBuilder>(
                  getLifetime(), getParentForChildren(), isClean());
          lifetime_ = null;
        }
        return lifetimeBuilder_;
      }

      private com.google.protobuf.Timestamp notBeforeTime_;
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.protobuf.Timestamp,
              com.google.protobuf.Timestamp.Builder,
              com.google.protobuf.TimestampOrBuilder>
          notBeforeTimeBuilder_;
      /**
       *
       *
       * <pre>
       * The time at which the certificate becomes valid.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
       *
       * @return Whether the notBeforeTime field is set.
       */
      public boolean hasNotBeforeTime() {
        return ((bitField0_ & 0x00000010) != 0);
      }
      /**
       *
       *
       * <pre>
       * The time at which the certificate becomes valid.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
       *
       * @return The notBeforeTime.
       */
      public com.google.protobuf.Timestamp getNotBeforeTime() {
        if (notBeforeTimeBuilder_ == null) {
          return notBeforeTime_ == null
              ? com.google.protobuf.Timestamp.getDefaultInstance()
              : notBeforeTime_;
        } else {
          return notBeforeTimeBuilder_.getMessage();
        }
      }
      /**
       *
       *
       * <pre>
       * The time at which the certificate becomes valid.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
       */
      public Builder setNotBeforeTime(com.google.protobuf.Timestamp value) {
        if (notBeforeTimeBuilder_ == null) {
          if (value == null) {
            throw new NullPointerException();
          }
          notBeforeTime_ = value;
        } else {
          notBeforeTimeBuilder_.setMessage(value);
        }
        bitField0_ |= 0x00000010;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The time at which the certificate becomes valid.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
       */
      public Builder setNotBeforeTime(com.google.protobuf.Timestamp.Builder builderForValue) {
        if (notBeforeTimeBuilder_ == null) {
          notBeforeTime_ = builderForValue.build();
        } else {
          notBeforeTimeBuilder_.setMessage(builderForValue.build());
        }
        bitField0_ |= 0x00000010;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The time at which the certificate becomes valid.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
       */
      public Builder mergeNotBeforeTime(com.google.protobuf.Timestamp value) {
        if (notBeforeTimeBuilder_ == null) {
          if (((bitField0_ & 0x00000010) != 0)
              && notBeforeTime_ != null
              && notBeforeTime_ != com.google.protobuf.Timestamp.getDefaultInstance()) {
            getNotBeforeTimeBuilder().mergeFrom(value);
          } else {
            notBeforeTime_ = value;
          }
        } else {
          notBeforeTimeBuilder_.mergeFrom(value);
        }
        bitField0_ |= 0x00000010;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The time at which the certificate becomes valid.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
       */
      public Builder clearNotBeforeTime() {
        bitField0_ = (bitField0_ & ~0x00000010);
        notBeforeTime_ = null;
        if (notBeforeTimeBuilder_ != null) {
          notBeforeTimeBuilder_.dispose();
          notBeforeTimeBuilder_ = null;
        }
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The time at which the certificate becomes valid.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
       */
      public com.google.protobuf.Timestamp.Builder getNotBeforeTimeBuilder() {
        bitField0_ |= 0x00000010;
        onChanged();
        return getNotBeforeTimeFieldBuilder().getBuilder();
      }
      /**
       *
       *
       * <pre>
       * The time at which the certificate becomes valid.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
       */
      public com.google.protobuf.TimestampOrBuilder getNotBeforeTimeOrBuilder() {
        if (notBeforeTimeBuilder_ != null) {
          return notBeforeTimeBuilder_.getMessageOrBuilder();
        } else {
          return notBeforeTime_ == null
              ? com.google.protobuf.Timestamp.getDefaultInstance()
              : notBeforeTime_;
        }
      }
      /**
       *
       *
       * <pre>
       * The time at which the certificate becomes valid.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_before_time = 5;</code>
       */
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.protobuf.Timestamp,
              com.google.protobuf.Timestamp.Builder,
              com.google.protobuf.TimestampOrBuilder>
          getNotBeforeTimeFieldBuilder() {
        if (notBeforeTimeBuilder_ == null) {
          notBeforeTimeBuilder_ =
              new com.google.protobuf.SingleFieldBuilderV3<
                  com.google.protobuf.Timestamp,
                  com.google.protobuf.Timestamp.Builder,
                  com.google.protobuf.TimestampOrBuilder>(
                  getNotBeforeTime(), getParentForChildren(), isClean());
          notBeforeTime_ = null;
        }
        return notBeforeTimeBuilder_;
      }

      private com.google.protobuf.Timestamp notAfterTime_;
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.protobuf.Timestamp,
              com.google.protobuf.Timestamp.Builder,
              com.google.protobuf.TimestampOrBuilder>
          notAfterTimeBuilder_;
      /**
       *
       *
       * <pre>
       * The time after which the certificate is expired.
       * Per RFC 5280, the validity period for a certificate is the period of time
       * from not_before_time through not_after_time, inclusive.
       * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
       *
       * @return Whether the notAfterTime field is set.
       */
      public boolean hasNotAfterTime() {
        return ((bitField0_ & 0x00000020) != 0);
      }
      /**
       *
       *
       * <pre>
       * The time after which the certificate is expired.
       * Per RFC 5280, the validity period for a certificate is the period of time
       * from not_before_time through not_after_time, inclusive.
       * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
       *
       * @return The notAfterTime.
       */
      public com.google.protobuf.Timestamp getNotAfterTime() {
        if (notAfterTimeBuilder_ == null) {
          return notAfterTime_ == null
              ? com.google.protobuf.Timestamp.getDefaultInstance()
              : notAfterTime_;
        } else {
          return notAfterTimeBuilder_.getMessage();
        }
      }
      /**
       *
       *
       * <pre>
       * The time after which the certificate is expired.
       * Per RFC 5280, the validity period for a certificate is the period of time
       * from not_before_time through not_after_time, inclusive.
       * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
       */
      public Builder setNotAfterTime(com.google.protobuf.Timestamp value) {
        if (notAfterTimeBuilder_ == null) {
          if (value == null) {
            throw new NullPointerException();
          }
          notAfterTime_ = value;
        } else {
          notAfterTimeBuilder_.setMessage(value);
        }
        bitField0_ |= 0x00000020;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The time after which the certificate is expired.
       * Per RFC 5280, the validity period for a certificate is the period of time
       * from not_before_time through not_after_time, inclusive.
       * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
       */
      public Builder setNotAfterTime(com.google.protobuf.Timestamp.Builder builderForValue) {
        if (notAfterTimeBuilder_ == null) {
          notAfterTime_ = builderForValue.build();
        } else {
          notAfterTimeBuilder_.setMessage(builderForValue.build());
        }
        bitField0_ |= 0x00000020;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The time after which the certificate is expired.
       * Per RFC 5280, the validity period for a certificate is the period of time
       * from not_before_time through not_after_time, inclusive.
       * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
       */
      public Builder mergeNotAfterTime(com.google.protobuf.Timestamp value) {
        if (notAfterTimeBuilder_ == null) {
          if (((bitField0_ & 0x00000020) != 0)
              && notAfterTime_ != null
              && notAfterTime_ != com.google.protobuf.Timestamp.getDefaultInstance()) {
            getNotAfterTimeBuilder().mergeFrom(value);
          } else {
            notAfterTime_ = value;
          }
        } else {
          notAfterTimeBuilder_.mergeFrom(value);
        }
        bitField0_ |= 0x00000020;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The time after which the certificate is expired.
       * Per RFC 5280, the validity period for a certificate is the period of time
       * from not_before_time through not_after_time, inclusive.
       * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
       */
      public Builder clearNotAfterTime() {
        bitField0_ = (bitField0_ & ~0x00000020);
        notAfterTime_ = null;
        if (notAfterTimeBuilder_ != null) {
          notAfterTimeBuilder_.dispose();
          notAfterTimeBuilder_ = null;
        }
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The time after which the certificate is expired.
       * Per RFC 5280, the validity period for a certificate is the period of time
       * from not_before_time through not_after_time, inclusive.
       * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
       */
      public com.google.protobuf.Timestamp.Builder getNotAfterTimeBuilder() {
        bitField0_ |= 0x00000020;
        onChanged();
        return getNotAfterTimeFieldBuilder().getBuilder();
      }
      /**
       *
       *
       * <pre>
       * The time after which the certificate is expired.
       * Per RFC 5280, the validity period for a certificate is the period of time
       * from not_before_time through not_after_time, inclusive.
       * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
       */
      public com.google.protobuf.TimestampOrBuilder getNotAfterTimeOrBuilder() {
        if (notAfterTimeBuilder_ != null) {
          return notAfterTimeBuilder_.getMessageOrBuilder();
        } else {
          return notAfterTime_ == null
              ? com.google.protobuf.Timestamp.getDefaultInstance()
              : notAfterTime_;
        }
      }
      /**
       *
       *
       * <pre>
       * The time after which the certificate is expired.
       * Per RFC 5280, the validity period for a certificate is the period of time
       * from not_before_time through not_after_time, inclusive.
       * Corresponds to 'not_before_time' + 'lifetime' - 1 second.
       * </pre>
       *
       * <code>.google.protobuf.Timestamp not_after_time = 6;</code>
       */
      private com.google.protobuf.SingleFieldBuilderV3<
              com.google.protobuf.Timestamp,
              com.google.protobuf.Timestamp.Builder,
              com.google.protobuf.TimestampOrBuilder>
          getNotAfterTimeFieldBuilder() {
        if (notAfterTimeBuilder_ == null) {
          notAfterTimeBuilder_ =
              new com.google.protobuf.SingleFieldBuilderV3<
                  com.google.protobuf.Timestamp,
                  com.google.protobuf.Timestamp.Builder,
                  com.google.protobuf.TimestampOrBuilder>(
                  getNotAfterTime(), getParentForChildren(), isClean());
          notAfterTime_ = null;
        }
        return notAfterTimeBuilder_;
      }

      @java.lang.Override
      public final Builder setUnknownFields(
          final com.google.protobuf.UnknownFieldSet unknownFields) {
        return super.setUnknownFields(unknownFields);
      }

      @java.lang.Override
      public final Builder mergeUnknownFields(
          final com.google.protobuf.UnknownFieldSet unknownFields) {
        return super.mergeUnknownFields(unknownFields);
      }

      // @@protoc_insertion_point(builder_scope:google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription)
    }

    // @@protoc_insertion_point(class_scope:google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription)
    private static final com.google.cloud.security.privateca.v1.CertificateDescription
            .SubjectDescription
        DEFAULT_INSTANCE;

    static {
      DEFAULT_INSTANCE =
          new com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription();
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        getDefaultInstance() {
      return DEFAULT_INSTANCE;
    }

    private static final com.google.protobuf.Parser<SubjectDescription> PARSER =
        new com.google.protobuf.AbstractParser<SubjectDescription>() {
          @java.lang.Override
          public SubjectDescription parsePartialFrom(
              com.google.protobuf.CodedInputStream input,
              com.google.protobuf.ExtensionRegistryLite extensionRegistry)
              throws com.google.protobuf.InvalidProtocolBufferException {
            Builder builder = newBuilder();
            try {
              builder.mergeFrom(input, extensionRegistry);
            } catch (com.google.protobuf.InvalidProtocolBufferException e) {
              throw e.setUnfinishedMessage(builder.buildPartial());
            } catch (com.google.protobuf.UninitializedMessageException e) {
              throw e.asInvalidProtocolBufferException()
                  .setUnfinishedMessage(builder.buildPartial());
            } catch (java.io.IOException e) {
              throw new com.google.protobuf.InvalidProtocolBufferException(e)
                  .setUnfinishedMessage(builder.buildPartial());
            }
            return builder.buildPartial();
          }
        };

    public static com.google.protobuf.Parser<SubjectDescription> parser() {
      return PARSER;
    }

    @java.lang.Override
    public com.google.protobuf.Parser<SubjectDescription> getParserForType() {
      return PARSER;
    }

    @java.lang.Override
    public com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        getDefaultInstanceForType() {
      return DEFAULT_INSTANCE;
    }
  }

  public interface KeyIdOrBuilder
      extends
      // @@protoc_insertion_point(interface_extends:google.cloud.security.privateca.v1.CertificateDescription.KeyId)
      com.google.protobuf.MessageOrBuilder {

    /**
     *
     *
     * <pre>
     * Optional. The value of this KeyId encoded in lowercase hexadecimal. This
     * is most likely the 160 bit SHA-1 hash of the public key.
     * </pre>
     *
     * <code>string key_id = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
     *
     * @return The keyId.
     */
    java.lang.String getKeyId();
    /**
     *
     *
     * <pre>
     * Optional. The value of this KeyId encoded in lowercase hexadecimal. This
     * is most likely the 160 bit SHA-1 hash of the public key.
     * </pre>
     *
     * <code>string key_id = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
     *
     * @return The bytes for keyId.
     */
    com.google.protobuf.ByteString getKeyIdBytes();
  }
  /**
   *
   *
   * <pre>
   * A KeyId identifies a specific public key, usually by hashing the public
   * key.
   * </pre>
   *
   * Protobuf type {@code google.cloud.security.privateca.v1.CertificateDescription.KeyId}
   */
  public static final class KeyId extends com.google.protobuf.GeneratedMessageV3
      implements
      // @@protoc_insertion_point(message_implements:google.cloud.security.privateca.v1.CertificateDescription.KeyId)
      KeyIdOrBuilder {
    private static final long serialVersionUID = 0L;
    // Use KeyId.newBuilder() to construct.
    private KeyId(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
      super(builder);
    }

    private KeyId() {
      keyId_ = "";
    }

    @java.lang.Override
    @SuppressWarnings({"unused"})
    protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
      return new KeyId();
    }

    @java.lang.Override
    public final com.google.protobuf.UnknownFieldSet getUnknownFields() {
      return this.unknownFields;
    }

    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
          .internal_static_google_cloud_security_privateca_v1_CertificateDescription_KeyId_descriptor;
    }

    @java.lang.Override
    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
        internalGetFieldAccessorTable() {
      return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
          .internal_static_google_cloud_security_privateca_v1_CertificateDescription_KeyId_fieldAccessorTable
          .ensureFieldAccessorsInitialized(
              com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.class,
              com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder.class);
    }

    public static final int KEY_ID_FIELD_NUMBER = 1;

    @SuppressWarnings("serial")
    private volatile java.lang.Object keyId_ = "";
    /**
     *
     *
     * <pre>
     * Optional. The value of this KeyId encoded in lowercase hexadecimal. This
     * is most likely the 160 bit SHA-1 hash of the public key.
     * </pre>
     *
     * <code>string key_id = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
     *
     * @return The keyId.
     */
    @java.lang.Override
    public java.lang.String getKeyId() {
      java.lang.Object ref = keyId_;
      if (ref instanceof java.lang.String) {
        return (java.lang.String) ref;
      } else {
        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
        java.lang.String s = bs.toStringUtf8();
        keyId_ = s;
        return s;
      }
    }
    /**
     *
     *
     * <pre>
     * Optional. The value of this KeyId encoded in lowercase hexadecimal. This
     * is most likely the 160 bit SHA-1 hash of the public key.
     * </pre>
     *
     * <code>string key_id = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
     *
     * @return The bytes for keyId.
     */
    @java.lang.Override
    public com.google.protobuf.ByteString getKeyIdBytes() {
      java.lang.Object ref = keyId_;
      if (ref instanceof java.lang.String) {
        com.google.protobuf.ByteString b =
            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
        keyId_ = b;
        return b;
      } else {
        return (com.google.protobuf.ByteString) ref;
      }
    }

    private byte memoizedIsInitialized = -1;

    @java.lang.Override
    public final boolean isInitialized() {
      byte isInitialized = memoizedIsInitialized;
      if (isInitialized == 1) return true;
      if (isInitialized == 0) return false;

      memoizedIsInitialized = 1;
      return true;
    }

    @java.lang.Override
    public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
      if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(keyId_)) {
        com.google.protobuf.GeneratedMessageV3.writeString(output, 1, keyId_);
      }
      getUnknownFields().writeTo(output);
    }

    @java.lang.Override
    public int getSerializedSize() {
      int size = memoizedSize;
      if (size != -1) return size;

      size = 0;
      if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(keyId_)) {
        size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, keyId_);
      }
      size += getUnknownFields().getSerializedSize();
      memoizedSize = size;
      return size;
    }

    @java.lang.Override
    public boolean equals(final java.lang.Object obj) {
      if (obj == this) {
        return true;
      }
      if (!(obj instanceof com.google.cloud.security.privateca.v1.CertificateDescription.KeyId)) {
        return super.equals(obj);
      }
      com.google.cloud.security.privateca.v1.CertificateDescription.KeyId other =
          (com.google.cloud.security.privateca.v1.CertificateDescription.KeyId) obj;

      if (!getKeyId().equals(other.getKeyId())) return false;
      if (!getUnknownFields().equals(other.getUnknownFields())) return false;
      return true;
    }

    @java.lang.Override
    public int hashCode() {
      if (memoizedHashCode != 0) {
        return memoizedHashCode;
      }
      int hash = 41;
      hash = (19 * hash) + getDescriptor().hashCode();
      hash = (37 * hash) + KEY_ID_FIELD_NUMBER;
      hash = (53 * hash) + getKeyId().hashCode();
      hash = (29 * hash) + getUnknownFields().hashCode();
      memoizedHashCode = hash;
      return hash;
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
        throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        com.google.protobuf.ByteString data)
        throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        com.google.protobuf.ByteString data,
        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
        throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
        throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        java.io.InputStream input) throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
        throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
          PARSER, input, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
        parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
        parseDelimitedFrom(
            java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
          PARSER, input, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        com.google.protobuf.CodedInputStream input) throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId parseFrom(
        com.google.protobuf.CodedInputStream input,
        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
        throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
          PARSER, input, extensionRegistry);
    }

    @java.lang.Override
    public Builder newBuilderForType() {
      return newBuilder();
    }

    public static Builder newBuilder() {
      return DEFAULT_INSTANCE.toBuilder();
    }

    public static Builder newBuilder(
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyId prototype) {
      return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
    }

    @java.lang.Override
    public Builder toBuilder() {
      return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
    }

    @java.lang.Override
    protected Builder newBuilderForType(
        com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
      Builder builder = new Builder(parent);
      return builder;
    }
    /**
     *
     *
     * <pre>
     * A KeyId identifies a specific public key, usually by hashing the public
     * key.
     * </pre>
     *
     * Protobuf type {@code google.cloud.security.privateca.v1.CertificateDescription.KeyId}
     */
    public static final class Builder
        extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
        implements
        // @@protoc_insertion_point(builder_implements:google.cloud.security.privateca.v1.CertificateDescription.KeyId)
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder {
      public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
        return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
            .internal_static_google_cloud_security_privateca_v1_CertificateDescription_KeyId_descriptor;
      }

      @java.lang.Override
      protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
          internalGetFieldAccessorTable() {
        return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
            .internal_static_google_cloud_security_privateca_v1_CertificateDescription_KeyId_fieldAccessorTable
            .ensureFieldAccessorsInitialized(
                com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.class,
                com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder.class);
      }

      // Construct using
      // com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.newBuilder()
      private Builder() {}

      private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
        super(parent);
      }

      @java.lang.Override
      public Builder clear() {
        super.clear();
        bitField0_ = 0;
        keyId_ = "";
        return this;
      }

      @java.lang.Override
      public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
        return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
            .internal_static_google_cloud_security_privateca_v1_CertificateDescription_KeyId_descriptor;
      }

      @java.lang.Override
      public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
          getDefaultInstanceForType() {
        return com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
            .getDefaultInstance();
      }

      @java.lang.Override
      public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId build() {
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyId result = buildPartial();
        if (!result.isInitialized()) {
          throw newUninitializedMessageException(result);
        }
        return result;
      }

      @java.lang.Override
      public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId buildPartial() {
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyId result =
            new com.google.cloud.security.privateca.v1.CertificateDescription.KeyId(this);
        if (bitField0_ != 0) {
          buildPartial0(result);
        }
        onBuilt();
        return result;
      }

      private void buildPartial0(
          com.google.cloud.security.privateca.v1.CertificateDescription.KeyId result) {
        int from_bitField0_ = bitField0_;
        if (((from_bitField0_ & 0x00000001) != 0)) {
          result.keyId_ = keyId_;
        }
      }

      @java.lang.Override
      public Builder clone() {
        return super.clone();
      }

      @java.lang.Override
      public Builder setField(
          com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
        return super.setField(field, value);
      }

      @java.lang.Override
      public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
        return super.clearField(field);
      }

      @java.lang.Override
      public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
        return super.clearOneof(oneof);
      }

      @java.lang.Override
      public Builder setRepeatedField(
          com.google.protobuf.Descriptors.FieldDescriptor field,
          int index,
          java.lang.Object value) {
        return super.setRepeatedField(field, index, value);
      }

      @java.lang.Override
      public Builder addRepeatedField(
          com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
        return super.addRepeatedField(field, value);
      }

      @java.lang.Override
      public Builder mergeFrom(com.google.protobuf.Message other) {
        if (other instanceof com.google.cloud.security.privateca.v1.CertificateDescription.KeyId) {
          return mergeFrom(
              (com.google.cloud.security.privateca.v1.CertificateDescription.KeyId) other);
        } else {
          super.mergeFrom(other);
          return this;
        }
      }

      public Builder mergeFrom(
          com.google.cloud.security.privateca.v1.CertificateDescription.KeyId other) {
        if (other
            == com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
                .getDefaultInstance()) return this;
        if (!other.getKeyId().isEmpty()) {
          keyId_ = other.keyId_;
          bitField0_ |= 0x00000001;
          onChanged();
        }
        this.mergeUnknownFields(other.getUnknownFields());
        onChanged();
        return this;
      }

      @java.lang.Override
      public final boolean isInitialized() {
        return true;
      }

      @java.lang.Override
      public Builder mergeFrom(
          com.google.protobuf.CodedInputStream input,
          com.google.protobuf.ExtensionRegistryLite extensionRegistry)
          throws java.io.IOException {
        if (extensionRegistry == null) {
          throw new java.lang.NullPointerException();
        }
        try {
          boolean done = false;
          while (!done) {
            int tag = input.readTag();
            switch (tag) {
              case 0:
                done = true;
                break;
              case 10:
                {
                  keyId_ = input.readStringRequireUtf8();
                  bitField0_ |= 0x00000001;
                  break;
                } // case 10
              default:
                {
                  if (!super.parseUnknownField(input, extensionRegistry, tag)) {
                    done = true; // was an endgroup tag
                  }
                  break;
                } // default:
            } // switch (tag)
          } // while (!done)
        } catch (com.google.protobuf.InvalidProtocolBufferException e) {
          throw e.unwrapIOException();
        } finally {
          onChanged();
        } // finally
        return this;
      }

      private int bitField0_;

      private java.lang.Object keyId_ = "";
      /**
       *
       *
       * <pre>
       * Optional. The value of this KeyId encoded in lowercase hexadecimal. This
       * is most likely the 160 bit SHA-1 hash of the public key.
       * </pre>
       *
       * <code>string key_id = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
       *
       * @return The keyId.
       */
      public java.lang.String getKeyId() {
        java.lang.Object ref = keyId_;
        if (!(ref instanceof java.lang.String)) {
          com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
          java.lang.String s = bs.toStringUtf8();
          keyId_ = s;
          return s;
        } else {
          return (java.lang.String) ref;
        }
      }
      /**
       *
       *
       * <pre>
       * Optional. The value of this KeyId encoded in lowercase hexadecimal. This
       * is most likely the 160 bit SHA-1 hash of the public key.
       * </pre>
       *
       * <code>string key_id = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
       *
       * @return The bytes for keyId.
       */
      public com.google.protobuf.ByteString getKeyIdBytes() {
        java.lang.Object ref = keyId_;
        if (ref instanceof String) {
          com.google.protobuf.ByteString b =
              com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
          keyId_ = b;
          return b;
        } else {
          return (com.google.protobuf.ByteString) ref;
        }
      }
      /**
       *
       *
       * <pre>
       * Optional. The value of this KeyId encoded in lowercase hexadecimal. This
       * is most likely the 160 bit SHA-1 hash of the public key.
       * </pre>
       *
       * <code>string key_id = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
       *
       * @param value The keyId to set.
       * @return This builder for chaining.
       */
      public Builder setKeyId(java.lang.String value) {
        if (value == null) {
          throw new NullPointerException();
        }
        keyId_ = value;
        bitField0_ |= 0x00000001;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * Optional. The value of this KeyId encoded in lowercase hexadecimal. This
       * is most likely the 160 bit SHA-1 hash of the public key.
       * </pre>
       *
       * <code>string key_id = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
       *
       * @return This builder for chaining.
       */
      public Builder clearKeyId() {
        keyId_ = getDefaultInstance().getKeyId();
        bitField0_ = (bitField0_ & ~0x00000001);
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * Optional. The value of this KeyId encoded in lowercase hexadecimal. This
       * is most likely the 160 bit SHA-1 hash of the public key.
       * </pre>
       *
       * <code>string key_id = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
       *
       * @param value The bytes for keyId to set.
       * @return This builder for chaining.
       */
      public Builder setKeyIdBytes(com.google.protobuf.ByteString value) {
        if (value == null) {
          throw new NullPointerException();
        }
        checkByteStringIsUtf8(value);
        keyId_ = value;
        bitField0_ |= 0x00000001;
        onChanged();
        return this;
      }

      @java.lang.Override
      public final Builder setUnknownFields(
          final com.google.protobuf.UnknownFieldSet unknownFields) {
        return super.setUnknownFields(unknownFields);
      }

      @java.lang.Override
      public final Builder mergeUnknownFields(
          final com.google.protobuf.UnknownFieldSet unknownFields) {
        return super.mergeUnknownFields(unknownFields);
      }

      // @@protoc_insertion_point(builder_scope:google.cloud.security.privateca.v1.CertificateDescription.KeyId)
    }

    // @@protoc_insertion_point(class_scope:google.cloud.security.privateca.v1.CertificateDescription.KeyId)
    private static final com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
        DEFAULT_INSTANCE;

    static {
      DEFAULT_INSTANCE = new com.google.cloud.security.privateca.v1.CertificateDescription.KeyId();
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
        getDefaultInstance() {
      return DEFAULT_INSTANCE;
    }

    private static final com.google.protobuf.Parser<KeyId> PARSER =
        new com.google.protobuf.AbstractParser<KeyId>() {
          @java.lang.Override
          public KeyId parsePartialFrom(
              com.google.protobuf.CodedInputStream input,
              com.google.protobuf.ExtensionRegistryLite extensionRegistry)
              throws com.google.protobuf.InvalidProtocolBufferException {
            Builder builder = newBuilder();
            try {
              builder.mergeFrom(input, extensionRegistry);
            } catch (com.google.protobuf.InvalidProtocolBufferException e) {
              throw e.setUnfinishedMessage(builder.buildPartial());
            } catch (com.google.protobuf.UninitializedMessageException e) {
              throw e.asInvalidProtocolBufferException()
                  .setUnfinishedMessage(builder.buildPartial());
            } catch (java.io.IOException e) {
              throw new com.google.protobuf.InvalidProtocolBufferException(e)
                  .setUnfinishedMessage(builder.buildPartial());
            }
            return builder.buildPartial();
          }
        };

    public static com.google.protobuf.Parser<KeyId> parser() {
      return PARSER;
    }

    @java.lang.Override
    public com.google.protobuf.Parser<KeyId> getParserForType() {
      return PARSER;
    }

    @java.lang.Override
    public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
        getDefaultInstanceForType() {
      return DEFAULT_INSTANCE;
    }
  }

  public interface CertificateFingerprintOrBuilder
      extends
      // @@protoc_insertion_point(interface_extends:google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint)
      com.google.protobuf.MessageOrBuilder {

    /**
     *
     *
     * <pre>
     * The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
     * </pre>
     *
     * <code>string sha256_hash = 1;</code>
     *
     * @return The sha256Hash.
     */
    java.lang.String getSha256Hash();
    /**
     *
     *
     * <pre>
     * The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
     * </pre>
     *
     * <code>string sha256_hash = 1;</code>
     *
     * @return The bytes for sha256Hash.
     */
    com.google.protobuf.ByteString getSha256HashBytes();
  }
  /**
   *
   *
   * <pre>
   * A group of fingerprints for the x509 certificate.
   * </pre>
   *
   * Protobuf type {@code
   * google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint}
   */
  public static final class CertificateFingerprint extends com.google.protobuf.GeneratedMessageV3
      implements
      // @@protoc_insertion_point(message_implements:google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint)
      CertificateFingerprintOrBuilder {
    private static final long serialVersionUID = 0L;
    // Use CertificateFingerprint.newBuilder() to construct.
    private CertificateFingerprint(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
      super(builder);
    }

    private CertificateFingerprint() {
      sha256Hash_ = "";
    }

    @java.lang.Override
    @SuppressWarnings({"unused"})
    protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
      return new CertificateFingerprint();
    }

    @java.lang.Override
    public final com.google.protobuf.UnknownFieldSet getUnknownFields() {
      return this.unknownFields;
    }

    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
          .internal_static_google_cloud_security_privateca_v1_CertificateDescription_CertificateFingerprint_descriptor;
    }

    @java.lang.Override
    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
        internalGetFieldAccessorTable() {
      return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
          .internal_static_google_cloud_security_privateca_v1_CertificateDescription_CertificateFingerprint_fieldAccessorTable
          .ensureFieldAccessorsInitialized(
              com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                  .class,
              com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                  .Builder.class);
    }

    public static final int SHA256_HASH_FIELD_NUMBER = 1;

    @SuppressWarnings("serial")
    private volatile java.lang.Object sha256Hash_ = "";
    /**
     *
     *
     * <pre>
     * The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
     * </pre>
     *
     * <code>string sha256_hash = 1;</code>
     *
     * @return The sha256Hash.
     */
    @java.lang.Override
    public java.lang.String getSha256Hash() {
      java.lang.Object ref = sha256Hash_;
      if (ref instanceof java.lang.String) {
        return (java.lang.String) ref;
      } else {
        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
        java.lang.String s = bs.toStringUtf8();
        sha256Hash_ = s;
        return s;
      }
    }
    /**
     *
     *
     * <pre>
     * The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
     * </pre>
     *
     * <code>string sha256_hash = 1;</code>
     *
     * @return The bytes for sha256Hash.
     */
    @java.lang.Override
    public com.google.protobuf.ByteString getSha256HashBytes() {
      java.lang.Object ref = sha256Hash_;
      if (ref instanceof java.lang.String) {
        com.google.protobuf.ByteString b =
            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
        sha256Hash_ = b;
        return b;
      } else {
        return (com.google.protobuf.ByteString) ref;
      }
    }

    private byte memoizedIsInitialized = -1;

    @java.lang.Override
    public final boolean isInitialized() {
      byte isInitialized = memoizedIsInitialized;
      if (isInitialized == 1) return true;
      if (isInitialized == 0) return false;

      memoizedIsInitialized = 1;
      return true;
    }

    @java.lang.Override
    public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
      if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(sha256Hash_)) {
        com.google.protobuf.GeneratedMessageV3.writeString(output, 1, sha256Hash_);
      }
      getUnknownFields().writeTo(output);
    }

    @java.lang.Override
    public int getSerializedSize() {
      int size = memoizedSize;
      if (size != -1) return size;

      size = 0;
      if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(sha256Hash_)) {
        size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, sha256Hash_);
      }
      size += getUnknownFields().getSerializedSize();
      memoizedSize = size;
      return size;
    }

    @java.lang.Override
    public boolean equals(final java.lang.Object obj) {
      if (obj == this) {
        return true;
      }
      if (!(obj
          instanceof
          com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint)) {
        return super.equals(obj);
      }
      com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint other =
          (com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint)
              obj;

      if (!getSha256Hash().equals(other.getSha256Hash())) return false;
      if (!getUnknownFields().equals(other.getUnknownFields())) return false;
      return true;
    }

    @java.lang.Override
    public int hashCode() {
      if (memoizedHashCode != 0) {
        return memoizedHashCode;
      }
      int hash = 41;
      hash = (19 * hash) + getDescriptor().hashCode();
      hash = (37 * hash) + SHA256_HASH_FIELD_NUMBER;
      hash = (53 * hash) + getSha256Hash().hashCode();
      hash = (29 * hash) + getUnknownFields().hashCode();
      memoizedHashCode = hash;
      return hash;
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(java.nio.ByteBuffer data)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(
            java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(com.google.protobuf.ByteString data)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(
            com.google.protobuf.ByteString data,
            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws com.google.protobuf.InvalidProtocolBufferException {
      return PARSER.parseFrom(data, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(java.io.InputStream input) throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(
            java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
          PARSER, input, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseDelimitedFrom(
            java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
          PARSER, input, extensionRegistry);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(com.google.protobuf.CodedInputStream input) throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        parseFrom(
            com.google.protobuf.CodedInputStream input,
            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws java.io.IOException {
      return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
          PARSER, input, extensionRegistry);
    }

    @java.lang.Override
    public Builder newBuilderForType() {
      return newBuilder();
    }

    public static Builder newBuilder() {
      return DEFAULT_INSTANCE.toBuilder();
    }

    public static Builder newBuilder(
        com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
            prototype) {
      return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
    }

    @java.lang.Override
    public Builder toBuilder() {
      return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
    }

    @java.lang.Override
    protected Builder newBuilderForType(
        com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
      Builder builder = new Builder(parent);
      return builder;
    }
    /**
     *
     *
     * <pre>
     * A group of fingerprints for the x509 certificate.
     * </pre>
     *
     * Protobuf type {@code
     * google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint}
     */
    public static final class Builder
        extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
        implements
        // @@protoc_insertion_point(builder_implements:google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint)
        com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprintOrBuilder {
      public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
        return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
            .internal_static_google_cloud_security_privateca_v1_CertificateDescription_CertificateFingerprint_descriptor;
      }

      @java.lang.Override
      protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
          internalGetFieldAccessorTable() {
        return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
            .internal_static_google_cloud_security_privateca_v1_CertificateDescription_CertificateFingerprint_fieldAccessorTable
            .ensureFieldAccessorsInitialized(
                com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                    .class,
                com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                    .Builder.class);
      }

      // Construct using
      // com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint.newBuilder()
      private Builder() {}

      private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
        super(parent);
      }

      @java.lang.Override
      public Builder clear() {
        super.clear();
        bitField0_ = 0;
        sha256Hash_ = "";
        return this;
      }

      @java.lang.Override
      public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
        return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
            .internal_static_google_cloud_security_privateca_v1_CertificateDescription_CertificateFingerprint_descriptor;
      }

      @java.lang.Override
      public com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
          getDefaultInstanceForType() {
        return com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
            .getDefaultInstance();
      }

      @java.lang.Override
      public com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
          build() {
        com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
            result = buildPartial();
        if (!result.isInitialized()) {
          throw newUninitializedMessageException(result);
        }
        return result;
      }

      @java.lang.Override
      public com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
          buildPartial() {
        com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
            result =
                new com.google.cloud.security.privateca.v1.CertificateDescription
                    .CertificateFingerprint(this);
        if (bitField0_ != 0) {
          buildPartial0(result);
        }
        onBuilt();
        return result;
      }

      private void buildPartial0(
          com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
              result) {
        int from_bitField0_ = bitField0_;
        if (((from_bitField0_ & 0x00000001) != 0)) {
          result.sha256Hash_ = sha256Hash_;
        }
      }

      @java.lang.Override
      public Builder clone() {
        return super.clone();
      }

      @java.lang.Override
      public Builder setField(
          com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
        return super.setField(field, value);
      }

      @java.lang.Override
      public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
        return super.clearField(field);
      }

      @java.lang.Override
      public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
        return super.clearOneof(oneof);
      }

      @java.lang.Override
      public Builder setRepeatedField(
          com.google.protobuf.Descriptors.FieldDescriptor field,
          int index,
          java.lang.Object value) {
        return super.setRepeatedField(field, index, value);
      }

      @java.lang.Override
      public Builder addRepeatedField(
          com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
        return super.addRepeatedField(field, value);
      }

      @java.lang.Override
      public Builder mergeFrom(com.google.protobuf.Message other) {
        if (other
            instanceof
            com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint) {
          return mergeFrom(
              (com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint)
                  other);
        } else {
          super.mergeFrom(other);
          return this;
        }
      }

      public Builder mergeFrom(
          com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
              other) {
        if (other
            == com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                .getDefaultInstance()) return this;
        if (!other.getSha256Hash().isEmpty()) {
          sha256Hash_ = other.sha256Hash_;
          bitField0_ |= 0x00000001;
          onChanged();
        }
        this.mergeUnknownFields(other.getUnknownFields());
        onChanged();
        return this;
      }

      @java.lang.Override
      public final boolean isInitialized() {
        return true;
      }

      @java.lang.Override
      public Builder mergeFrom(
          com.google.protobuf.CodedInputStream input,
          com.google.protobuf.ExtensionRegistryLite extensionRegistry)
          throws java.io.IOException {
        if (extensionRegistry == null) {
          throw new java.lang.NullPointerException();
        }
        try {
          boolean done = false;
          while (!done) {
            int tag = input.readTag();
            switch (tag) {
              case 0:
                done = true;
                break;
              case 10:
                {
                  sha256Hash_ = input.readStringRequireUtf8();
                  bitField0_ |= 0x00000001;
                  break;
                } // case 10
              default:
                {
                  if (!super.parseUnknownField(input, extensionRegistry, tag)) {
                    done = true; // was an endgroup tag
                  }
                  break;
                } // default:
            } // switch (tag)
          } // while (!done)
        } catch (com.google.protobuf.InvalidProtocolBufferException e) {
          throw e.unwrapIOException();
        } finally {
          onChanged();
        } // finally
        return this;
      }

      private int bitField0_;

      private java.lang.Object sha256Hash_ = "";
      /**
       *
       *
       * <pre>
       * The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
       * </pre>
       *
       * <code>string sha256_hash = 1;</code>
       *
       * @return The sha256Hash.
       */
      public java.lang.String getSha256Hash() {
        java.lang.Object ref = sha256Hash_;
        if (!(ref instanceof java.lang.String)) {
          com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
          java.lang.String s = bs.toStringUtf8();
          sha256Hash_ = s;
          return s;
        } else {
          return (java.lang.String) ref;
        }
      }
      /**
       *
       *
       * <pre>
       * The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
       * </pre>
       *
       * <code>string sha256_hash = 1;</code>
       *
       * @return The bytes for sha256Hash.
       */
      public com.google.protobuf.ByteString getSha256HashBytes() {
        java.lang.Object ref = sha256Hash_;
        if (ref instanceof String) {
          com.google.protobuf.ByteString b =
              com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
          sha256Hash_ = b;
          return b;
        } else {
          return (com.google.protobuf.ByteString) ref;
        }
      }
      /**
       *
       *
       * <pre>
       * The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
       * </pre>
       *
       * <code>string sha256_hash = 1;</code>
       *
       * @param value The sha256Hash to set.
       * @return This builder for chaining.
       */
      public Builder setSha256Hash(java.lang.String value) {
        if (value == null) {
          throw new NullPointerException();
        }
        sha256Hash_ = value;
        bitField0_ |= 0x00000001;
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
       * </pre>
       *
       * <code>string sha256_hash = 1;</code>
       *
       * @return This builder for chaining.
       */
      public Builder clearSha256Hash() {
        sha256Hash_ = getDefaultInstance().getSha256Hash();
        bitField0_ = (bitField0_ & ~0x00000001);
        onChanged();
        return this;
      }
      /**
       *
       *
       * <pre>
       * The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
       * </pre>
       *
       * <code>string sha256_hash = 1;</code>
       *
       * @param value The bytes for sha256Hash to set.
       * @return This builder for chaining.
       */
      public Builder setSha256HashBytes(com.google.protobuf.ByteString value) {
        if (value == null) {
          throw new NullPointerException();
        }
        checkByteStringIsUtf8(value);
        sha256Hash_ = value;
        bitField0_ |= 0x00000001;
        onChanged();
        return this;
      }

      @java.lang.Override
      public final Builder setUnknownFields(
          final com.google.protobuf.UnknownFieldSet unknownFields) {
        return super.setUnknownFields(unknownFields);
      }

      @java.lang.Override
      public final Builder mergeUnknownFields(
          final com.google.protobuf.UnknownFieldSet unknownFields) {
        return super.mergeUnknownFields(unknownFields);
      }

      // @@protoc_insertion_point(builder_scope:google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint)
    }

    // @@protoc_insertion_point(class_scope:google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint)
    private static final com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        DEFAULT_INSTANCE;

    static {
      DEFAULT_INSTANCE =
          new com.google.cloud.security.privateca.v1.CertificateDescription
              .CertificateFingerprint();
    }

    public static com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprint
        getDefaultInstance() {
      return DEFAULT_INSTANCE;
    }

    private static final com.google.protobuf.Parser<CertificateFingerprint> PARSER =
        new com.google.protobuf.AbstractParser<CertificateFingerprint>() {
          @java.lang.Override
          public CertificateFingerprint parsePartialFrom(
              com.google.protobuf.CodedInputStream input,
              com.google.protobuf.ExtensionRegistryLite extensionRegistry)
              throws com.google.protobuf.InvalidProtocolBufferException {
            Builder builder = newBuilder();
            try {
              builder.mergeFrom(input, extensionRegistry);
            } catch (com.google.protobuf.InvalidProtocolBufferException e) {
              throw e.setUnfinishedMessage(builder.buildPartial());
            } catch (com.google.protobuf.UninitializedMessageException e) {
              throw e.asInvalidProtocolBufferException()
                  .setUnfinishedMessage(builder.buildPartial());
            } catch (java.io.IOException e) {
              throw new com.google.protobuf.InvalidProtocolBufferException(e)
                  .setUnfinishedMessage(builder.buildPartial());
            }
            return builder.buildPartial();
          }
        };

    public static com.google.protobuf.Parser<CertificateFingerprint> parser() {
      return PARSER;
    }

    @java.lang.Override
    public com.google.protobuf.Parser<CertificateFingerprint> getParserForType() {
      return PARSER;
    }

    @java.lang.Override
    public com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
        getDefaultInstanceForType() {
      return DEFAULT_INSTANCE;
    }
  }

  public static final int SUBJECT_DESCRIPTION_FIELD_NUMBER = 1;
  private com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
      subjectDescription_;
  /**
   *
   *
   * <pre>
   * Describes some of the values in a certificate that are related to the
   * subject and lifetime.
   * </pre>
   *
   * <code>
   * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
   * </code>
   *
   * @return Whether the subjectDescription field is set.
   */
  @java.lang.Override
  public boolean hasSubjectDescription() {
    return subjectDescription_ != null;
  }
  /**
   *
   *
   * <pre>
   * Describes some of the values in a certificate that are related to the
   * subject and lifetime.
   * </pre>
   *
   * <code>
   * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
   * </code>
   *
   * @return The subjectDescription.
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
      getSubjectDescription() {
    return subjectDescription_ == null
        ? com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
            .getDefaultInstance()
        : subjectDescription_;
  }
  /**
   *
   *
   * <pre>
   * Describes some of the values in a certificate that are related to the
   * subject and lifetime.
   * </pre>
   *
   * <code>
   * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
   * </code>
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescriptionOrBuilder
      getSubjectDescriptionOrBuilder() {
    return subjectDescription_ == null
        ? com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
            .getDefaultInstance()
        : subjectDescription_;
  }

  public static final int X509_DESCRIPTION_FIELD_NUMBER = 2;
  private com.google.cloud.security.privateca.v1.X509Parameters x509Description_;
  /**
   *
   *
   * <pre>
   * Describes some of the technical X.509 fields in a certificate.
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
   *
   * @return Whether the x509Description field is set.
   */
  @java.lang.Override
  public boolean hasX509Description() {
    return x509Description_ != null;
  }
  /**
   *
   *
   * <pre>
   * Describes some of the technical X.509 fields in a certificate.
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
   *
   * @return The x509Description.
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.X509Parameters getX509Description() {
    return x509Description_ == null
        ? com.google.cloud.security.privateca.v1.X509Parameters.getDefaultInstance()
        : x509Description_;
  }
  /**
   *
   *
   * <pre>
   * Describes some of the technical X.509 fields in a certificate.
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.X509ParametersOrBuilder
      getX509DescriptionOrBuilder() {
    return x509Description_ == null
        ? com.google.cloud.security.privateca.v1.X509Parameters.getDefaultInstance()
        : x509Description_;
  }

  public static final int PUBLIC_KEY_FIELD_NUMBER = 3;
  private com.google.cloud.security.privateca.v1.PublicKey publicKey_;
  /**
   *
   *
   * <pre>
   * The public key that corresponds to an issued certificate.
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
   *
   * @return Whether the publicKey field is set.
   */
  @java.lang.Override
  public boolean hasPublicKey() {
    return publicKey_ != null;
  }
  /**
   *
   *
   * <pre>
   * The public key that corresponds to an issued certificate.
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
   *
   * @return The publicKey.
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.PublicKey getPublicKey() {
    return publicKey_ == null
        ? com.google.cloud.security.privateca.v1.PublicKey.getDefaultInstance()
        : publicKey_;
  }
  /**
   *
   *
   * <pre>
   * The public key that corresponds to an issued certificate.
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.PublicKeyOrBuilder getPublicKeyOrBuilder() {
    return publicKey_ == null
        ? com.google.cloud.security.privateca.v1.PublicKey.getDefaultInstance()
        : publicKey_;
  }

  public static final int SUBJECT_KEY_ID_FIELD_NUMBER = 4;
  private com.google.cloud.security.privateca.v1.CertificateDescription.KeyId subjectKeyId_;
  /**
   *
   *
   * <pre>
   * Provides a means of identifiying certificates that contain a particular
   * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
   * </code>
   *
   * @return Whether the subjectKeyId field is set.
   */
  @java.lang.Override
  public boolean hasSubjectKeyId() {
    return subjectKeyId_ != null;
  }
  /**
   *
   *
   * <pre>
   * Provides a means of identifiying certificates that contain a particular
   * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
   * </code>
   *
   * @return The subjectKeyId.
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId getSubjectKeyId() {
    return subjectKeyId_ == null
        ? com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.getDefaultInstance()
        : subjectKeyId_;
  }
  /**
   *
   *
   * <pre>
   * Provides a means of identifiying certificates that contain a particular
   * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
   * </code>
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder
      getSubjectKeyIdOrBuilder() {
    return subjectKeyId_ == null
        ? com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.getDefaultInstance()
        : subjectKeyId_;
  }

  public static final int AUTHORITY_KEY_ID_FIELD_NUMBER = 5;
  private com.google.cloud.security.privateca.v1.CertificateDescription.KeyId authorityKeyId_;
  /**
   *
   *
   * <pre>
   * Identifies the subject_key_id of the parent certificate, per
   * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
   * </code>
   *
   * @return Whether the authorityKeyId field is set.
   */
  @java.lang.Override
  public boolean hasAuthorityKeyId() {
    return authorityKeyId_ != null;
  }
  /**
   *
   *
   * <pre>
   * Identifies the subject_key_id of the parent certificate, per
   * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
   * </code>
   *
   * @return The authorityKeyId.
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId getAuthorityKeyId() {
    return authorityKeyId_ == null
        ? com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.getDefaultInstance()
        : authorityKeyId_;
  }
  /**
   *
   *
   * <pre>
   * Identifies the subject_key_id of the parent certificate, per
   * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
   * </pre>
   *
   * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
   * </code>
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder
      getAuthorityKeyIdOrBuilder() {
    return authorityKeyId_ == null
        ? com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.getDefaultInstance()
        : authorityKeyId_;
  }

  public static final int CRL_DISTRIBUTION_POINTS_FIELD_NUMBER = 6;

  @SuppressWarnings("serial")
  private com.google.protobuf.LazyStringList crlDistributionPoints_;
  /**
   *
   *
   * <pre>
   * Describes a list of locations to obtain CRL information, i.e.
   * the DistributionPoint.fullName described by
   * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
   * </pre>
   *
   * <code>repeated string crl_distribution_points = 6;</code>
   *
   * @return A list containing the crlDistributionPoints.
   */
  public com.google.protobuf.ProtocolStringList getCrlDistributionPointsList() {
    return crlDistributionPoints_;
  }
  /**
   *
   *
   * <pre>
   * Describes a list of locations to obtain CRL information, i.e.
   * the DistributionPoint.fullName described by
   * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
   * </pre>
   *
   * <code>repeated string crl_distribution_points = 6;</code>
   *
   * @return The count of crlDistributionPoints.
   */
  public int getCrlDistributionPointsCount() {
    return crlDistributionPoints_.size();
  }
  /**
   *
   *
   * <pre>
   * Describes a list of locations to obtain CRL information, i.e.
   * the DistributionPoint.fullName described by
   * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
   * </pre>
   *
   * <code>repeated string crl_distribution_points = 6;</code>
   *
   * @param index The index of the element to return.
   * @return The crlDistributionPoints at the given index.
   */
  public java.lang.String getCrlDistributionPoints(int index) {
    return crlDistributionPoints_.get(index);
  }
  /**
   *
   *
   * <pre>
   * Describes a list of locations to obtain CRL information, i.e.
   * the DistributionPoint.fullName described by
   * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
   * </pre>
   *
   * <code>repeated string crl_distribution_points = 6;</code>
   *
   * @param index The index of the value to return.
   * @return The bytes of the crlDistributionPoints at the given index.
   */
  public com.google.protobuf.ByteString getCrlDistributionPointsBytes(int index) {
    return crlDistributionPoints_.getByteString(index);
  }

  public static final int AIA_ISSUING_CERTIFICATE_URLS_FIELD_NUMBER = 7;

  @SuppressWarnings("serial")
  private com.google.protobuf.LazyStringList aiaIssuingCertificateUrls_;
  /**
   *
   *
   * <pre>
   * Describes lists of issuer CA certificate URLs that appear in the
   * "Authority Information Access" extension in the certificate.
   * </pre>
   *
   * <code>repeated string aia_issuing_certificate_urls = 7;</code>
   *
   * @return A list containing the aiaIssuingCertificateUrls.
   */
  public com.google.protobuf.ProtocolStringList getAiaIssuingCertificateUrlsList() {
    return aiaIssuingCertificateUrls_;
  }
  /**
   *
   *
   * <pre>
   * Describes lists of issuer CA certificate URLs that appear in the
   * "Authority Information Access" extension in the certificate.
   * </pre>
   *
   * <code>repeated string aia_issuing_certificate_urls = 7;</code>
   *
   * @return The count of aiaIssuingCertificateUrls.
   */
  public int getAiaIssuingCertificateUrlsCount() {
    return aiaIssuingCertificateUrls_.size();
  }
  /**
   *
   *
   * <pre>
   * Describes lists of issuer CA certificate URLs that appear in the
   * "Authority Information Access" extension in the certificate.
   * </pre>
   *
   * <code>repeated string aia_issuing_certificate_urls = 7;</code>
   *
   * @param index The index of the element to return.
   * @return The aiaIssuingCertificateUrls at the given index.
   */
  public java.lang.String getAiaIssuingCertificateUrls(int index) {
    return aiaIssuingCertificateUrls_.get(index);
  }
  /**
   *
   *
   * <pre>
   * Describes lists of issuer CA certificate URLs that appear in the
   * "Authority Information Access" extension in the certificate.
   * </pre>
   *
   * <code>repeated string aia_issuing_certificate_urls = 7;</code>
   *
   * @param index The index of the value to return.
   * @return The bytes of the aiaIssuingCertificateUrls at the given index.
   */
  public com.google.protobuf.ByteString getAiaIssuingCertificateUrlsBytes(int index) {
    return aiaIssuingCertificateUrls_.getByteString(index);
  }

  public static final int CERT_FINGERPRINT_FIELD_NUMBER = 8;
  private com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
      certFingerprint_;
  /**
   *
   *
   * <pre>
   * The hash of the x.509 certificate.
   * </pre>
   *
   * <code>
   * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
   * </code>
   *
   * @return Whether the certFingerprint field is set.
   */
  @java.lang.Override
  public boolean hasCertFingerprint() {
    return certFingerprint_ != null;
  }
  /**
   *
   *
   * <pre>
   * The hash of the x.509 certificate.
   * </pre>
   *
   * <code>
   * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
   * </code>
   *
   * @return The certFingerprint.
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
      getCertFingerprint() {
    return certFingerprint_ == null
        ? com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
            .getDefaultInstance()
        : certFingerprint_;
  }
  /**
   *
   *
   * <pre>
   * The hash of the x.509 certificate.
   * </pre>
   *
   * <code>
   * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
   * </code>
   */
  @java.lang.Override
  public com.google.cloud.security.privateca.v1.CertificateDescription
          .CertificateFingerprintOrBuilder
      getCertFingerprintOrBuilder() {
    return certFingerprint_ == null
        ? com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
            .getDefaultInstance()
        : certFingerprint_;
  }

  private byte memoizedIsInitialized = -1;

  @java.lang.Override
  public final boolean isInitialized() {
    byte isInitialized = memoizedIsInitialized;
    if (isInitialized == 1) return true;
    if (isInitialized == 0) return false;

    memoizedIsInitialized = 1;
    return true;
  }

  @java.lang.Override
  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
    if (subjectDescription_ != null) {
      output.writeMessage(1, getSubjectDescription());
    }
    if (x509Description_ != null) {
      output.writeMessage(2, getX509Description());
    }
    if (publicKey_ != null) {
      output.writeMessage(3, getPublicKey());
    }
    if (subjectKeyId_ != null) {
      output.writeMessage(4, getSubjectKeyId());
    }
    if (authorityKeyId_ != null) {
      output.writeMessage(5, getAuthorityKeyId());
    }
    for (int i = 0; i < crlDistributionPoints_.size(); i++) {
      com.google.protobuf.GeneratedMessageV3.writeString(
          output, 6, crlDistributionPoints_.getRaw(i));
    }
    for (int i = 0; i < aiaIssuingCertificateUrls_.size(); i++) {
      com.google.protobuf.GeneratedMessageV3.writeString(
          output, 7, aiaIssuingCertificateUrls_.getRaw(i));
    }
    if (certFingerprint_ != null) {
      output.writeMessage(8, getCertFingerprint());
    }
    getUnknownFields().writeTo(output);
  }

  @java.lang.Override
  public int getSerializedSize() {
    int size = memoizedSize;
    if (size != -1) return size;

    size = 0;
    if (subjectDescription_ != null) {
      size += com.google.protobuf.CodedOutputStream.computeMessageSize(1, getSubjectDescription());
    }
    if (x509Description_ != null) {
      size += com.google.protobuf.CodedOutputStream.computeMessageSize(2, getX509Description());
    }
    if (publicKey_ != null) {
      size += com.google.protobuf.CodedOutputStream.computeMessageSize(3, getPublicKey());
    }
    if (subjectKeyId_ != null) {
      size += com.google.protobuf.CodedOutputStream.computeMessageSize(4, getSubjectKeyId());
    }
    if (authorityKeyId_ != null) {
      size += com.google.protobuf.CodedOutputStream.computeMessageSize(5, getAuthorityKeyId());
    }
    {
      int dataSize = 0;
      for (int i = 0; i < crlDistributionPoints_.size(); i++) {
        dataSize += computeStringSizeNoTag(crlDistributionPoints_.getRaw(i));
      }
      size += dataSize;
      size += 1 * getCrlDistributionPointsList().size();
    }
    {
      int dataSize = 0;
      for (int i = 0; i < aiaIssuingCertificateUrls_.size(); i++) {
        dataSize += computeStringSizeNoTag(aiaIssuingCertificateUrls_.getRaw(i));
      }
      size += dataSize;
      size += 1 * getAiaIssuingCertificateUrlsList().size();
    }
    if (certFingerprint_ != null) {
      size += com.google.protobuf.CodedOutputStream.computeMessageSize(8, getCertFingerprint());
    }
    size += getUnknownFields().getSerializedSize();
    memoizedSize = size;
    return size;
  }

  @java.lang.Override
  public boolean equals(final java.lang.Object obj) {
    if (obj == this) {
      return true;
    }
    if (!(obj instanceof com.google.cloud.security.privateca.v1.CertificateDescription)) {
      return super.equals(obj);
    }
    com.google.cloud.security.privateca.v1.CertificateDescription other =
        (com.google.cloud.security.privateca.v1.CertificateDescription) obj;

    if (hasSubjectDescription() != other.hasSubjectDescription()) return false;
    if (hasSubjectDescription()) {
      if (!getSubjectDescription().equals(other.getSubjectDescription())) return false;
    }
    if (hasX509Description() != other.hasX509Description()) return false;
    if (hasX509Description()) {
      if (!getX509Description().equals(other.getX509Description())) return false;
    }
    if (hasPublicKey() != other.hasPublicKey()) return false;
    if (hasPublicKey()) {
      if (!getPublicKey().equals(other.getPublicKey())) return false;
    }
    if (hasSubjectKeyId() != other.hasSubjectKeyId()) return false;
    if (hasSubjectKeyId()) {
      if (!getSubjectKeyId().equals(other.getSubjectKeyId())) return false;
    }
    if (hasAuthorityKeyId() != other.hasAuthorityKeyId()) return false;
    if (hasAuthorityKeyId()) {
      if (!getAuthorityKeyId().equals(other.getAuthorityKeyId())) return false;
    }
    if (!getCrlDistributionPointsList().equals(other.getCrlDistributionPointsList())) return false;
    if (!getAiaIssuingCertificateUrlsList().equals(other.getAiaIssuingCertificateUrlsList()))
      return false;
    if (hasCertFingerprint() != other.hasCertFingerprint()) return false;
    if (hasCertFingerprint()) {
      if (!getCertFingerprint().equals(other.getCertFingerprint())) return false;
    }
    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
    return true;
  }

  @java.lang.Override
  public int hashCode() {
    if (memoizedHashCode != 0) {
      return memoizedHashCode;
    }
    int hash = 41;
    hash = (19 * hash) + getDescriptor().hashCode();
    if (hasSubjectDescription()) {
      hash = (37 * hash) + SUBJECT_DESCRIPTION_FIELD_NUMBER;
      hash = (53 * hash) + getSubjectDescription().hashCode();
    }
    if (hasX509Description()) {
      hash = (37 * hash) + X509_DESCRIPTION_FIELD_NUMBER;
      hash = (53 * hash) + getX509Description().hashCode();
    }
    if (hasPublicKey()) {
      hash = (37 * hash) + PUBLIC_KEY_FIELD_NUMBER;
      hash = (53 * hash) + getPublicKey().hashCode();
    }
    if (hasSubjectKeyId()) {
      hash = (37 * hash) + SUBJECT_KEY_ID_FIELD_NUMBER;
      hash = (53 * hash) + getSubjectKeyId().hashCode();
    }
    if (hasAuthorityKeyId()) {
      hash = (37 * hash) + AUTHORITY_KEY_ID_FIELD_NUMBER;
      hash = (53 * hash) + getAuthorityKeyId().hashCode();
    }
    if (getCrlDistributionPointsCount() > 0) {
      hash = (37 * hash) + CRL_DISTRIBUTION_POINTS_FIELD_NUMBER;
      hash = (53 * hash) + getCrlDistributionPointsList().hashCode();
    }
    if (getAiaIssuingCertificateUrlsCount() > 0) {
      hash = (37 * hash) + AIA_ISSUING_CERTIFICATE_URLS_FIELD_NUMBER;
      hash = (53 * hash) + getAiaIssuingCertificateUrlsList().hashCode();
    }
    if (hasCertFingerprint()) {
      hash = (37 * hash) + CERT_FINGERPRINT_FIELD_NUMBER;
      hash = (53 * hash) + getCertFingerprint().hashCode();
    }
    hash = (29 * hash) + getUnknownFields().hashCode();
    memoizedHashCode = hash;
    return hash;
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(
      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
    return PARSER.parseFrom(data);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(
      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
      throws com.google.protobuf.InvalidProtocolBufferException {
    return PARSER.parseFrom(data, extensionRegistry);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(
      com.google.protobuf.ByteString data)
      throws com.google.protobuf.InvalidProtocolBufferException {
    return PARSER.parseFrom(data);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(
      com.google.protobuf.ByteString data,
      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
      throws com.google.protobuf.InvalidProtocolBufferException {
    return PARSER.parseFrom(data, extensionRegistry);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(byte[] data)
      throws com.google.protobuf.InvalidProtocolBufferException {
    return PARSER.parseFrom(data);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(
      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
      throws com.google.protobuf.InvalidProtocolBufferException {
    return PARSER.parseFrom(data, extensionRegistry);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(
      java.io.InputStream input) throws java.io.IOException {
    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(
      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
      throws java.io.IOException {
    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
        PARSER, input, extensionRegistry);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseDelimitedFrom(
      java.io.InputStream input) throws java.io.IOException {
    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseDelimitedFrom(
      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
      throws java.io.IOException {
    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
        PARSER, input, extensionRegistry);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(
      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription parseFrom(
      com.google.protobuf.CodedInputStream input,
      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
      throws java.io.IOException {
    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
        PARSER, input, extensionRegistry);
  }

  @java.lang.Override
  public Builder newBuilderForType() {
    return newBuilder();
  }

  public static Builder newBuilder() {
    return DEFAULT_INSTANCE.toBuilder();
  }

  public static Builder newBuilder(
      com.google.cloud.security.privateca.v1.CertificateDescription prototype) {
    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
  }

  @java.lang.Override
  public Builder toBuilder() {
    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
  }

  @java.lang.Override
  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
    Builder builder = new Builder(parent);
    return builder;
  }
  /**
   *
   *
   * <pre>
   * A
   * [CertificateDescription][google.cloud.security.privateca.v1.CertificateDescription]
   * describes an X.509 certificate or CSR that has been issued, as an alternative
   * to using ASN.1 / X.509.
   * </pre>
   *
   * Protobuf type {@code google.cloud.security.privateca.v1.CertificateDescription}
   */
  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
      implements
      // @@protoc_insertion_point(builder_implements:google.cloud.security.privateca.v1.CertificateDescription)
      com.google.cloud.security.privateca.v1.CertificateDescriptionOrBuilder {
    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
          .internal_static_google_cloud_security_privateca_v1_CertificateDescription_descriptor;
    }

    @java.lang.Override
    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
        internalGetFieldAccessorTable() {
      return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
          .internal_static_google_cloud_security_privateca_v1_CertificateDescription_fieldAccessorTable
          .ensureFieldAccessorsInitialized(
              com.google.cloud.security.privateca.v1.CertificateDescription.class,
              com.google.cloud.security.privateca.v1.CertificateDescription.Builder.class);
    }

    // Construct using com.google.cloud.security.privateca.v1.CertificateDescription.newBuilder()
    private Builder() {}

    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
      super(parent);
    }

    @java.lang.Override
    public Builder clear() {
      super.clear();
      bitField0_ = 0;
      subjectDescription_ = null;
      if (subjectDescriptionBuilder_ != null) {
        subjectDescriptionBuilder_.dispose();
        subjectDescriptionBuilder_ = null;
      }
      x509Description_ = null;
      if (x509DescriptionBuilder_ != null) {
        x509DescriptionBuilder_.dispose();
        x509DescriptionBuilder_ = null;
      }
      publicKey_ = null;
      if (publicKeyBuilder_ != null) {
        publicKeyBuilder_.dispose();
        publicKeyBuilder_ = null;
      }
      subjectKeyId_ = null;
      if (subjectKeyIdBuilder_ != null) {
        subjectKeyIdBuilder_.dispose();
        subjectKeyIdBuilder_ = null;
      }
      authorityKeyId_ = null;
      if (authorityKeyIdBuilder_ != null) {
        authorityKeyIdBuilder_.dispose();
        authorityKeyIdBuilder_ = null;
      }
      crlDistributionPoints_ = com.google.protobuf.LazyStringArrayList.EMPTY;
      bitField0_ = (bitField0_ & ~0x00000020);
      aiaIssuingCertificateUrls_ = com.google.protobuf.LazyStringArrayList.EMPTY;
      bitField0_ = (bitField0_ & ~0x00000040);
      certFingerprint_ = null;
      if (certFingerprintBuilder_ != null) {
        certFingerprintBuilder_.dispose();
        certFingerprintBuilder_ = null;
      }
      return this;
    }

    @java.lang.Override
    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
      return com.google.cloud.security.privateca.v1.PrivateCaResourcesProto
          .internal_static_google_cloud_security_privateca_v1_CertificateDescription_descriptor;
    }

    @java.lang.Override
    public com.google.cloud.security.privateca.v1.CertificateDescription
        getDefaultInstanceForType() {
      return com.google.cloud.security.privateca.v1.CertificateDescription.getDefaultInstance();
    }

    @java.lang.Override
    public com.google.cloud.security.privateca.v1.CertificateDescription build() {
      com.google.cloud.security.privateca.v1.CertificateDescription result = buildPartial();
      if (!result.isInitialized()) {
        throw newUninitializedMessageException(result);
      }
      return result;
    }

    @java.lang.Override
    public com.google.cloud.security.privateca.v1.CertificateDescription buildPartial() {
      com.google.cloud.security.privateca.v1.CertificateDescription result =
          new com.google.cloud.security.privateca.v1.CertificateDescription(this);
      buildPartialRepeatedFields(result);
      if (bitField0_ != 0) {
        buildPartial0(result);
      }
      onBuilt();
      return result;
    }

    private void buildPartialRepeatedFields(
        com.google.cloud.security.privateca.v1.CertificateDescription result) {
      if (((bitField0_ & 0x00000020) != 0)) {
        crlDistributionPoints_ = crlDistributionPoints_.getUnmodifiableView();
        bitField0_ = (bitField0_ & ~0x00000020);
      }
      result.crlDistributionPoints_ = crlDistributionPoints_;
      if (((bitField0_ & 0x00000040) != 0)) {
        aiaIssuingCertificateUrls_ = aiaIssuingCertificateUrls_.getUnmodifiableView();
        bitField0_ = (bitField0_ & ~0x00000040);
      }
      result.aiaIssuingCertificateUrls_ = aiaIssuingCertificateUrls_;
    }

    private void buildPartial0(
        com.google.cloud.security.privateca.v1.CertificateDescription result) {
      int from_bitField0_ = bitField0_;
      if (((from_bitField0_ & 0x00000001) != 0)) {
        result.subjectDescription_ =
            subjectDescriptionBuilder_ == null
                ? subjectDescription_
                : subjectDescriptionBuilder_.build();
      }
      if (((from_bitField0_ & 0x00000002) != 0)) {
        result.x509Description_ =
            x509DescriptionBuilder_ == null ? x509Description_ : x509DescriptionBuilder_.build();
      }
      if (((from_bitField0_ & 0x00000004) != 0)) {
        result.publicKey_ = publicKeyBuilder_ == null ? publicKey_ : publicKeyBuilder_.build();
      }
      if (((from_bitField0_ & 0x00000008) != 0)) {
        result.subjectKeyId_ =
            subjectKeyIdBuilder_ == null ? subjectKeyId_ : subjectKeyIdBuilder_.build();
      }
      if (((from_bitField0_ & 0x00000010) != 0)) {
        result.authorityKeyId_ =
            authorityKeyIdBuilder_ == null ? authorityKeyId_ : authorityKeyIdBuilder_.build();
      }
      if (((from_bitField0_ & 0x00000080) != 0)) {
        result.certFingerprint_ =
            certFingerprintBuilder_ == null ? certFingerprint_ : certFingerprintBuilder_.build();
      }
    }

    @java.lang.Override
    public Builder clone() {
      return super.clone();
    }

    @java.lang.Override
    public Builder setField(
        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
      return super.setField(field, value);
    }

    @java.lang.Override
    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
      return super.clearField(field);
    }

    @java.lang.Override
    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
      return super.clearOneof(oneof);
    }

    @java.lang.Override
    public Builder setRepeatedField(
        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
      return super.setRepeatedField(field, index, value);
    }

    @java.lang.Override
    public Builder addRepeatedField(
        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
      return super.addRepeatedField(field, value);
    }

    @java.lang.Override
    public Builder mergeFrom(com.google.protobuf.Message other) {
      if (other instanceof com.google.cloud.security.privateca.v1.CertificateDescription) {
        return mergeFrom((com.google.cloud.security.privateca.v1.CertificateDescription) other);
      } else {
        super.mergeFrom(other);
        return this;
      }
    }

    public Builder mergeFrom(com.google.cloud.security.privateca.v1.CertificateDescription other) {
      if (other
          == com.google.cloud.security.privateca.v1.CertificateDescription.getDefaultInstance())
        return this;
      if (other.hasSubjectDescription()) {
        mergeSubjectDescription(other.getSubjectDescription());
      }
      if (other.hasX509Description()) {
        mergeX509Description(other.getX509Description());
      }
      if (other.hasPublicKey()) {
        mergePublicKey(other.getPublicKey());
      }
      if (other.hasSubjectKeyId()) {
        mergeSubjectKeyId(other.getSubjectKeyId());
      }
      if (other.hasAuthorityKeyId()) {
        mergeAuthorityKeyId(other.getAuthorityKeyId());
      }
      if (!other.crlDistributionPoints_.isEmpty()) {
        if (crlDistributionPoints_.isEmpty()) {
          crlDistributionPoints_ = other.crlDistributionPoints_;
          bitField0_ = (bitField0_ & ~0x00000020);
        } else {
          ensureCrlDistributionPointsIsMutable();
          crlDistributionPoints_.addAll(other.crlDistributionPoints_);
        }
        onChanged();
      }
      if (!other.aiaIssuingCertificateUrls_.isEmpty()) {
        if (aiaIssuingCertificateUrls_.isEmpty()) {
          aiaIssuingCertificateUrls_ = other.aiaIssuingCertificateUrls_;
          bitField0_ = (bitField0_ & ~0x00000040);
        } else {
          ensureAiaIssuingCertificateUrlsIsMutable();
          aiaIssuingCertificateUrls_.addAll(other.aiaIssuingCertificateUrls_);
        }
        onChanged();
      }
      if (other.hasCertFingerprint()) {
        mergeCertFingerprint(other.getCertFingerprint());
      }
      this.mergeUnknownFields(other.getUnknownFields());
      onChanged();
      return this;
    }

    @java.lang.Override
    public final boolean isInitialized() {
      return true;
    }

    @java.lang.Override
    public Builder mergeFrom(
        com.google.protobuf.CodedInputStream input,
        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
        throws java.io.IOException {
      if (extensionRegistry == null) {
        throw new java.lang.NullPointerException();
      }
      try {
        boolean done = false;
        while (!done) {
          int tag = input.readTag();
          switch (tag) {
            case 0:
              done = true;
              break;
            case 10:
              {
                input.readMessage(
                    getSubjectDescriptionFieldBuilder().getBuilder(), extensionRegistry);
                bitField0_ |= 0x00000001;
                break;
              } // case 10
            case 18:
              {
                input.readMessage(getX509DescriptionFieldBuilder().getBuilder(), extensionRegistry);
                bitField0_ |= 0x00000002;
                break;
              } // case 18
            case 26:
              {
                input.readMessage(getPublicKeyFieldBuilder().getBuilder(), extensionRegistry);
                bitField0_ |= 0x00000004;
                break;
              } // case 26
            case 34:
              {
                input.readMessage(getSubjectKeyIdFieldBuilder().getBuilder(), extensionRegistry);
                bitField0_ |= 0x00000008;
                break;
              } // case 34
            case 42:
              {
                input.readMessage(getAuthorityKeyIdFieldBuilder().getBuilder(), extensionRegistry);
                bitField0_ |= 0x00000010;
                break;
              } // case 42
            case 50:
              {
                java.lang.String s = input.readStringRequireUtf8();
                ensureCrlDistributionPointsIsMutable();
                crlDistributionPoints_.add(s);
                break;
              } // case 50
            case 58:
              {
                java.lang.String s = input.readStringRequireUtf8();
                ensureAiaIssuingCertificateUrlsIsMutable();
                aiaIssuingCertificateUrls_.add(s);
                break;
              } // case 58
            case 66:
              {
                input.readMessage(getCertFingerprintFieldBuilder().getBuilder(), extensionRegistry);
                bitField0_ |= 0x00000080;
                break;
              } // case 66
            default:
              {
                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
                  done = true; // was an endgroup tag
                }
                break;
              } // default:
          } // switch (tag)
        } // while (!done)
      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
        throw e.unwrapIOException();
      } finally {
        onChanged();
      } // finally
      return this;
    }

    private int bitField0_;

    private com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        subjectDescription_;
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription,
            com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                .Builder,
            com.google.cloud.security.privateca.v1.CertificateDescription
                .SubjectDescriptionOrBuilder>
        subjectDescriptionBuilder_;
    /**
     *
     *
     * <pre>
     * Describes some of the values in a certificate that are related to the
     * subject and lifetime.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
     * </code>
     *
     * @return Whether the subjectDescription field is set.
     */
    public boolean hasSubjectDescription() {
      return ((bitField0_ & 0x00000001) != 0);
    }
    /**
     *
     *
     * <pre>
     * Describes some of the values in a certificate that are related to the
     * subject and lifetime.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
     * </code>
     *
     * @return The subjectDescription.
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
        getSubjectDescription() {
      if (subjectDescriptionBuilder_ == null) {
        return subjectDescription_ == null
            ? com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                .getDefaultInstance()
            : subjectDescription_;
      } else {
        return subjectDescriptionBuilder_.getMessage();
      }
    }
    /**
     *
     *
     * <pre>
     * Describes some of the values in a certificate that are related to the
     * subject and lifetime.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
     * </code>
     */
    public Builder setSubjectDescription(
        com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription value) {
      if (subjectDescriptionBuilder_ == null) {
        if (value == null) {
          throw new NullPointerException();
        }
        subjectDescription_ = value;
      } else {
        subjectDescriptionBuilder_.setMessage(value);
      }
      bitField0_ |= 0x00000001;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes some of the values in a certificate that are related to the
     * subject and lifetime.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
     * </code>
     */
    public Builder setSubjectDescription(
        com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription.Builder
            builderForValue) {
      if (subjectDescriptionBuilder_ == null) {
        subjectDescription_ = builderForValue.build();
      } else {
        subjectDescriptionBuilder_.setMessage(builderForValue.build());
      }
      bitField0_ |= 0x00000001;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes some of the values in a certificate that are related to the
     * subject and lifetime.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
     * </code>
     */
    public Builder mergeSubjectDescription(
        com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription value) {
      if (subjectDescriptionBuilder_ == null) {
        if (((bitField0_ & 0x00000001) != 0)
            && subjectDescription_ != null
            && subjectDescription_
                != com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                    .getDefaultInstance()) {
          getSubjectDescriptionBuilder().mergeFrom(value);
        } else {
          subjectDescription_ = value;
        }
      } else {
        subjectDescriptionBuilder_.mergeFrom(value);
      }
      bitField0_ |= 0x00000001;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes some of the values in a certificate that are related to the
     * subject and lifetime.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
     * </code>
     */
    public Builder clearSubjectDescription() {
      bitField0_ = (bitField0_ & ~0x00000001);
      subjectDescription_ = null;
      if (subjectDescriptionBuilder_ != null) {
        subjectDescriptionBuilder_.dispose();
        subjectDescriptionBuilder_ = null;
      }
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes some of the values in a certificate that are related to the
     * subject and lifetime.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
     * </code>
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription.Builder
        getSubjectDescriptionBuilder() {
      bitField0_ |= 0x00000001;
      onChanged();
      return getSubjectDescriptionFieldBuilder().getBuilder();
    }
    /**
     *
     *
     * <pre>
     * Describes some of the values in a certificate that are related to the
     * subject and lifetime.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
     * </code>
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescriptionOrBuilder
        getSubjectDescriptionOrBuilder() {
      if (subjectDescriptionBuilder_ != null) {
        return subjectDescriptionBuilder_.getMessageOrBuilder();
      } else {
        return subjectDescription_ == null
            ? com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                .getDefaultInstance()
            : subjectDescription_;
      }
    }
    /**
     *
     *
     * <pre>
     * Describes some of the values in a certificate that are related to the
     * subject and lifetime.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription subject_description = 1;
     * </code>
     */
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription,
            com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                .Builder,
            com.google.cloud.security.privateca.v1.CertificateDescription
                .SubjectDescriptionOrBuilder>
        getSubjectDescriptionFieldBuilder() {
      if (subjectDescriptionBuilder_ == null) {
        subjectDescriptionBuilder_ =
            new com.google.protobuf.SingleFieldBuilderV3<
                com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription,
                com.google.cloud.security.privateca.v1.CertificateDescription.SubjectDescription
                    .Builder,
                com.google.cloud.security.privateca.v1.CertificateDescription
                    .SubjectDescriptionOrBuilder>(
                getSubjectDescription(), getParentForChildren(), isClean());
        subjectDescription_ = null;
      }
      return subjectDescriptionBuilder_;
    }

    private com.google.cloud.security.privateca.v1.X509Parameters x509Description_;
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.X509Parameters,
            com.google.cloud.security.privateca.v1.X509Parameters.Builder,
            com.google.cloud.security.privateca.v1.X509ParametersOrBuilder>
        x509DescriptionBuilder_;
    /**
     *
     *
     * <pre>
     * Describes some of the technical X.509 fields in a certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
     *
     * @return Whether the x509Description field is set.
     */
    public boolean hasX509Description() {
      return ((bitField0_ & 0x00000002) != 0);
    }
    /**
     *
     *
     * <pre>
     * Describes some of the technical X.509 fields in a certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
     *
     * @return The x509Description.
     */
    public com.google.cloud.security.privateca.v1.X509Parameters getX509Description() {
      if (x509DescriptionBuilder_ == null) {
        return x509Description_ == null
            ? com.google.cloud.security.privateca.v1.X509Parameters.getDefaultInstance()
            : x509Description_;
      } else {
        return x509DescriptionBuilder_.getMessage();
      }
    }
    /**
     *
     *
     * <pre>
     * Describes some of the technical X.509 fields in a certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
     */
    public Builder setX509Description(com.google.cloud.security.privateca.v1.X509Parameters value) {
      if (x509DescriptionBuilder_ == null) {
        if (value == null) {
          throw new NullPointerException();
        }
        x509Description_ = value;
      } else {
        x509DescriptionBuilder_.setMessage(value);
      }
      bitField0_ |= 0x00000002;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes some of the technical X.509 fields in a certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
     */
    public Builder setX509Description(
        com.google.cloud.security.privateca.v1.X509Parameters.Builder builderForValue) {
      if (x509DescriptionBuilder_ == null) {
        x509Description_ = builderForValue.build();
      } else {
        x509DescriptionBuilder_.setMessage(builderForValue.build());
      }
      bitField0_ |= 0x00000002;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes some of the technical X.509 fields in a certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
     */
    public Builder mergeX509Description(
        com.google.cloud.security.privateca.v1.X509Parameters value) {
      if (x509DescriptionBuilder_ == null) {
        if (((bitField0_ & 0x00000002) != 0)
            && x509Description_ != null
            && x509Description_
                != com.google.cloud.security.privateca.v1.X509Parameters.getDefaultInstance()) {
          getX509DescriptionBuilder().mergeFrom(value);
        } else {
          x509Description_ = value;
        }
      } else {
        x509DescriptionBuilder_.mergeFrom(value);
      }
      bitField0_ |= 0x00000002;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes some of the technical X.509 fields in a certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
     */
    public Builder clearX509Description() {
      bitField0_ = (bitField0_ & ~0x00000002);
      x509Description_ = null;
      if (x509DescriptionBuilder_ != null) {
        x509DescriptionBuilder_.dispose();
        x509DescriptionBuilder_ = null;
      }
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes some of the technical X.509 fields in a certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
     */
    public com.google.cloud.security.privateca.v1.X509Parameters.Builder
        getX509DescriptionBuilder() {
      bitField0_ |= 0x00000002;
      onChanged();
      return getX509DescriptionFieldBuilder().getBuilder();
    }
    /**
     *
     *
     * <pre>
     * Describes some of the technical X.509 fields in a certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
     */
    public com.google.cloud.security.privateca.v1.X509ParametersOrBuilder
        getX509DescriptionOrBuilder() {
      if (x509DescriptionBuilder_ != null) {
        return x509DescriptionBuilder_.getMessageOrBuilder();
      } else {
        return x509Description_ == null
            ? com.google.cloud.security.privateca.v1.X509Parameters.getDefaultInstance()
            : x509Description_;
      }
    }
    /**
     *
     *
     * <pre>
     * Describes some of the technical X.509 fields in a certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.X509Parameters x509_description = 2;</code>
     */
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.X509Parameters,
            com.google.cloud.security.privateca.v1.X509Parameters.Builder,
            com.google.cloud.security.privateca.v1.X509ParametersOrBuilder>
        getX509DescriptionFieldBuilder() {
      if (x509DescriptionBuilder_ == null) {
        x509DescriptionBuilder_ =
            new com.google.protobuf.SingleFieldBuilderV3<
                com.google.cloud.security.privateca.v1.X509Parameters,
                com.google.cloud.security.privateca.v1.X509Parameters.Builder,
                com.google.cloud.security.privateca.v1.X509ParametersOrBuilder>(
                getX509Description(), getParentForChildren(), isClean());
        x509Description_ = null;
      }
      return x509DescriptionBuilder_;
    }

    private com.google.cloud.security.privateca.v1.PublicKey publicKey_;
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.PublicKey,
            com.google.cloud.security.privateca.v1.PublicKey.Builder,
            com.google.cloud.security.privateca.v1.PublicKeyOrBuilder>
        publicKeyBuilder_;
    /**
     *
     *
     * <pre>
     * The public key that corresponds to an issued certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
     *
     * @return Whether the publicKey field is set.
     */
    public boolean hasPublicKey() {
      return ((bitField0_ & 0x00000004) != 0);
    }
    /**
     *
     *
     * <pre>
     * The public key that corresponds to an issued certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
     *
     * @return The publicKey.
     */
    public com.google.cloud.security.privateca.v1.PublicKey getPublicKey() {
      if (publicKeyBuilder_ == null) {
        return publicKey_ == null
            ? com.google.cloud.security.privateca.v1.PublicKey.getDefaultInstance()
            : publicKey_;
      } else {
        return publicKeyBuilder_.getMessage();
      }
    }
    /**
     *
     *
     * <pre>
     * The public key that corresponds to an issued certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
     */
    public Builder setPublicKey(com.google.cloud.security.privateca.v1.PublicKey value) {
      if (publicKeyBuilder_ == null) {
        if (value == null) {
          throw new NullPointerException();
        }
        publicKey_ = value;
      } else {
        publicKeyBuilder_.setMessage(value);
      }
      bitField0_ |= 0x00000004;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * The public key that corresponds to an issued certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
     */
    public Builder setPublicKey(
        com.google.cloud.security.privateca.v1.PublicKey.Builder builderForValue) {
      if (publicKeyBuilder_ == null) {
        publicKey_ = builderForValue.build();
      } else {
        publicKeyBuilder_.setMessage(builderForValue.build());
      }
      bitField0_ |= 0x00000004;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * The public key that corresponds to an issued certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
     */
    public Builder mergePublicKey(com.google.cloud.security.privateca.v1.PublicKey value) {
      if (publicKeyBuilder_ == null) {
        if (((bitField0_ & 0x00000004) != 0)
            && publicKey_ != null
            && publicKey_
                != com.google.cloud.security.privateca.v1.PublicKey.getDefaultInstance()) {
          getPublicKeyBuilder().mergeFrom(value);
        } else {
          publicKey_ = value;
        }
      } else {
        publicKeyBuilder_.mergeFrom(value);
      }
      bitField0_ |= 0x00000004;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * The public key that corresponds to an issued certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
     */
    public Builder clearPublicKey() {
      bitField0_ = (bitField0_ & ~0x00000004);
      publicKey_ = null;
      if (publicKeyBuilder_ != null) {
        publicKeyBuilder_.dispose();
        publicKeyBuilder_ = null;
      }
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * The public key that corresponds to an issued certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
     */
    public com.google.cloud.security.privateca.v1.PublicKey.Builder getPublicKeyBuilder() {
      bitField0_ |= 0x00000004;
      onChanged();
      return getPublicKeyFieldBuilder().getBuilder();
    }
    /**
     *
     *
     * <pre>
     * The public key that corresponds to an issued certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
     */
    public com.google.cloud.security.privateca.v1.PublicKeyOrBuilder getPublicKeyOrBuilder() {
      if (publicKeyBuilder_ != null) {
        return publicKeyBuilder_.getMessageOrBuilder();
      } else {
        return publicKey_ == null
            ? com.google.cloud.security.privateca.v1.PublicKey.getDefaultInstance()
            : publicKey_;
      }
    }
    /**
     *
     *
     * <pre>
     * The public key that corresponds to an issued certificate.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.PublicKey public_key = 3;</code>
     */
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.PublicKey,
            com.google.cloud.security.privateca.v1.PublicKey.Builder,
            com.google.cloud.security.privateca.v1.PublicKeyOrBuilder>
        getPublicKeyFieldBuilder() {
      if (publicKeyBuilder_ == null) {
        publicKeyBuilder_ =
            new com.google.protobuf.SingleFieldBuilderV3<
                com.google.cloud.security.privateca.v1.PublicKey,
                com.google.cloud.security.privateca.v1.PublicKey.Builder,
                com.google.cloud.security.privateca.v1.PublicKeyOrBuilder>(
                getPublicKey(), getParentForChildren(), isClean());
        publicKey_ = null;
      }
      return publicKeyBuilder_;
    }

    private com.google.cloud.security.privateca.v1.CertificateDescription.KeyId subjectKeyId_;
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyId,
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder,
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder>
        subjectKeyIdBuilder_;
    /**
     *
     *
     * <pre>
     * Provides a means of identifiying certificates that contain a particular
     * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
     * </code>
     *
     * @return Whether the subjectKeyId field is set.
     */
    public boolean hasSubjectKeyId() {
      return ((bitField0_ & 0x00000008) != 0);
    }
    /**
     *
     *
     * <pre>
     * Provides a means of identifiying certificates that contain a particular
     * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
     * </code>
     *
     * @return The subjectKeyId.
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId getSubjectKeyId() {
      if (subjectKeyIdBuilder_ == null) {
        return subjectKeyId_ == null
            ? com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
                .getDefaultInstance()
            : subjectKeyId_;
      } else {
        return subjectKeyIdBuilder_.getMessage();
      }
    }
    /**
     *
     *
     * <pre>
     * Provides a means of identifiying certificates that contain a particular
     * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
     * </code>
     */
    public Builder setSubjectKeyId(
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyId value) {
      if (subjectKeyIdBuilder_ == null) {
        if (value == null) {
          throw new NullPointerException();
        }
        subjectKeyId_ = value;
      } else {
        subjectKeyIdBuilder_.setMessage(value);
      }
      bitField0_ |= 0x00000008;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Provides a means of identifiying certificates that contain a particular
     * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
     * </code>
     */
    public Builder setSubjectKeyId(
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder
            builderForValue) {
      if (subjectKeyIdBuilder_ == null) {
        subjectKeyId_ = builderForValue.build();
      } else {
        subjectKeyIdBuilder_.setMessage(builderForValue.build());
      }
      bitField0_ |= 0x00000008;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Provides a means of identifiying certificates that contain a particular
     * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
     * </code>
     */
    public Builder mergeSubjectKeyId(
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyId value) {
      if (subjectKeyIdBuilder_ == null) {
        if (((bitField0_ & 0x00000008) != 0)
            && subjectKeyId_ != null
            && subjectKeyId_
                != com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
                    .getDefaultInstance()) {
          getSubjectKeyIdBuilder().mergeFrom(value);
        } else {
          subjectKeyId_ = value;
        }
      } else {
        subjectKeyIdBuilder_.mergeFrom(value);
      }
      bitField0_ |= 0x00000008;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Provides a means of identifiying certificates that contain a particular
     * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
     * </code>
     */
    public Builder clearSubjectKeyId() {
      bitField0_ = (bitField0_ & ~0x00000008);
      subjectKeyId_ = null;
      if (subjectKeyIdBuilder_ != null) {
        subjectKeyIdBuilder_.dispose();
        subjectKeyIdBuilder_ = null;
      }
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Provides a means of identifiying certificates that contain a particular
     * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
     * </code>
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder
        getSubjectKeyIdBuilder() {
      bitField0_ |= 0x00000008;
      onChanged();
      return getSubjectKeyIdFieldBuilder().getBuilder();
    }
    /**
     *
     *
     * <pre>
     * Provides a means of identifiying certificates that contain a particular
     * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
     * </code>
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder
        getSubjectKeyIdOrBuilder() {
      if (subjectKeyIdBuilder_ != null) {
        return subjectKeyIdBuilder_.getMessageOrBuilder();
      } else {
        return subjectKeyId_ == null
            ? com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
                .getDefaultInstance()
            : subjectKeyId_;
      }
    }
    /**
     *
     *
     * <pre>
     * Provides a means of identifiying certificates that contain a particular
     * public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId subject_key_id = 4;
     * </code>
     */
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyId,
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder,
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder>
        getSubjectKeyIdFieldBuilder() {
      if (subjectKeyIdBuilder_ == null) {
        subjectKeyIdBuilder_ =
            new com.google.protobuf.SingleFieldBuilderV3<
                com.google.cloud.security.privateca.v1.CertificateDescription.KeyId,
                com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder,
                com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder>(
                getSubjectKeyId(), getParentForChildren(), isClean());
        subjectKeyId_ = null;
      }
      return subjectKeyIdBuilder_;
    }

    private com.google.cloud.security.privateca.v1.CertificateDescription.KeyId authorityKeyId_;
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyId,
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder,
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder>
        authorityKeyIdBuilder_;
    /**
     *
     *
     * <pre>
     * Identifies the subject_key_id of the parent certificate, per
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
     * </code>
     *
     * @return Whether the authorityKeyId field is set.
     */
    public boolean hasAuthorityKeyId() {
      return ((bitField0_ & 0x00000010) != 0);
    }
    /**
     *
     *
     * <pre>
     * Identifies the subject_key_id of the parent certificate, per
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
     * </code>
     *
     * @return The authorityKeyId.
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId getAuthorityKeyId() {
      if (authorityKeyIdBuilder_ == null) {
        return authorityKeyId_ == null
            ? com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
                .getDefaultInstance()
            : authorityKeyId_;
      } else {
        return authorityKeyIdBuilder_.getMessage();
      }
    }
    /**
     *
     *
     * <pre>
     * Identifies the subject_key_id of the parent certificate, per
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
     * </code>
     */
    public Builder setAuthorityKeyId(
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyId value) {
      if (authorityKeyIdBuilder_ == null) {
        if (value == null) {
          throw new NullPointerException();
        }
        authorityKeyId_ = value;
      } else {
        authorityKeyIdBuilder_.setMessage(value);
      }
      bitField0_ |= 0x00000010;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Identifies the subject_key_id of the parent certificate, per
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
     * </code>
     */
    public Builder setAuthorityKeyId(
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder
            builderForValue) {
      if (authorityKeyIdBuilder_ == null) {
        authorityKeyId_ = builderForValue.build();
      } else {
        authorityKeyIdBuilder_.setMessage(builderForValue.build());
      }
      bitField0_ |= 0x00000010;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Identifies the subject_key_id of the parent certificate, per
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
     * </code>
     */
    public Builder mergeAuthorityKeyId(
        com.google.cloud.security.privateca.v1.CertificateDescription.KeyId value) {
      if (authorityKeyIdBuilder_ == null) {
        if (((bitField0_ & 0x00000010) != 0)
            && authorityKeyId_ != null
            && authorityKeyId_
                != com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
                    .getDefaultInstance()) {
          getAuthorityKeyIdBuilder().mergeFrom(value);
        } else {
          authorityKeyId_ = value;
        }
      } else {
        authorityKeyIdBuilder_.mergeFrom(value);
      }
      bitField0_ |= 0x00000010;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Identifies the subject_key_id of the parent certificate, per
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
     * </code>
     */
    public Builder clearAuthorityKeyId() {
      bitField0_ = (bitField0_ & ~0x00000010);
      authorityKeyId_ = null;
      if (authorityKeyIdBuilder_ != null) {
        authorityKeyIdBuilder_.dispose();
        authorityKeyIdBuilder_ = null;
      }
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Identifies the subject_key_id of the parent certificate, per
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
     * </code>
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder
        getAuthorityKeyIdBuilder() {
      bitField0_ |= 0x00000010;
      onChanged();
      return getAuthorityKeyIdFieldBuilder().getBuilder();
    }
    /**
     *
     *
     * <pre>
     * Identifies the subject_key_id of the parent certificate, per
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
     * </code>
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder
        getAuthorityKeyIdOrBuilder() {
      if (authorityKeyIdBuilder_ != null) {
        return authorityKeyIdBuilder_.getMessageOrBuilder();
      } else {
        return authorityKeyId_ == null
            ? com.google.cloud.security.privateca.v1.CertificateDescription.KeyId
                .getDefaultInstance()
            : authorityKeyId_;
      }
    }
    /**
     *
     *
     * <pre>
     * Identifies the subject_key_id of the parent certificate, per
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.1
     * </pre>
     *
     * <code>.google.cloud.security.privateca.v1.CertificateDescription.KeyId authority_key_id = 5;
     * </code>
     */
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyId,
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder,
            com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder>
        getAuthorityKeyIdFieldBuilder() {
      if (authorityKeyIdBuilder_ == null) {
        authorityKeyIdBuilder_ =
            new com.google.protobuf.SingleFieldBuilderV3<
                com.google.cloud.security.privateca.v1.CertificateDescription.KeyId,
                com.google.cloud.security.privateca.v1.CertificateDescription.KeyId.Builder,
                com.google.cloud.security.privateca.v1.CertificateDescription.KeyIdOrBuilder>(
                getAuthorityKeyId(), getParentForChildren(), isClean());
        authorityKeyId_ = null;
      }
      return authorityKeyIdBuilder_;
    }

    private com.google.protobuf.LazyStringList crlDistributionPoints_ =
        com.google.protobuf.LazyStringArrayList.EMPTY;

    private void ensureCrlDistributionPointsIsMutable() {
      if (!((bitField0_ & 0x00000020) != 0)) {
        crlDistributionPoints_ =
            new com.google.protobuf.LazyStringArrayList(crlDistributionPoints_);
        bitField0_ |= 0x00000020;
      }
    }
    /**
     *
     *
     * <pre>
     * Describes a list of locations to obtain CRL information, i.e.
     * the DistributionPoint.fullName described by
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
     * </pre>
     *
     * <code>repeated string crl_distribution_points = 6;</code>
     *
     * @return A list containing the crlDistributionPoints.
     */
    public com.google.protobuf.ProtocolStringList getCrlDistributionPointsList() {
      return crlDistributionPoints_.getUnmodifiableView();
    }
    /**
     *
     *
     * <pre>
     * Describes a list of locations to obtain CRL information, i.e.
     * the DistributionPoint.fullName described by
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
     * </pre>
     *
     * <code>repeated string crl_distribution_points = 6;</code>
     *
     * @return The count of crlDistributionPoints.
     */
    public int getCrlDistributionPointsCount() {
      return crlDistributionPoints_.size();
    }
    /**
     *
     *
     * <pre>
     * Describes a list of locations to obtain CRL information, i.e.
     * the DistributionPoint.fullName described by
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
     * </pre>
     *
     * <code>repeated string crl_distribution_points = 6;</code>
     *
     * @param index The index of the element to return.
     * @return The crlDistributionPoints at the given index.
     */
    public java.lang.String getCrlDistributionPoints(int index) {
      return crlDistributionPoints_.get(index);
    }
    /**
     *
     *
     * <pre>
     * Describes a list of locations to obtain CRL information, i.e.
     * the DistributionPoint.fullName described by
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
     * </pre>
     *
     * <code>repeated string crl_distribution_points = 6;</code>
     *
     * @param index The index of the value to return.
     * @return The bytes of the crlDistributionPoints at the given index.
     */
    public com.google.protobuf.ByteString getCrlDistributionPointsBytes(int index) {
      return crlDistributionPoints_.getByteString(index);
    }
    /**
     *
     *
     * <pre>
     * Describes a list of locations to obtain CRL information, i.e.
     * the DistributionPoint.fullName described by
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
     * </pre>
     *
     * <code>repeated string crl_distribution_points = 6;</code>
     *
     * @param index The index to set the value at.
     * @param value The crlDistributionPoints to set.
     * @return This builder for chaining.
     */
    public Builder setCrlDistributionPoints(int index, java.lang.String value) {
      if (value == null) {
        throw new NullPointerException();
      }
      ensureCrlDistributionPointsIsMutable();
      crlDistributionPoints_.set(index, value);
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes a list of locations to obtain CRL information, i.e.
     * the DistributionPoint.fullName described by
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
     * </pre>
     *
     * <code>repeated string crl_distribution_points = 6;</code>
     *
     * @param value The crlDistributionPoints to add.
     * @return This builder for chaining.
     */
    public Builder addCrlDistributionPoints(java.lang.String value) {
      if (value == null) {
        throw new NullPointerException();
      }
      ensureCrlDistributionPointsIsMutable();
      crlDistributionPoints_.add(value);
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes a list of locations to obtain CRL information, i.e.
     * the DistributionPoint.fullName described by
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
     * </pre>
     *
     * <code>repeated string crl_distribution_points = 6;</code>
     *
     * @param values The crlDistributionPoints to add.
     * @return This builder for chaining.
     */
    public Builder addAllCrlDistributionPoints(java.lang.Iterable<java.lang.String> values) {
      ensureCrlDistributionPointsIsMutable();
      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, crlDistributionPoints_);
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes a list of locations to obtain CRL information, i.e.
     * the DistributionPoint.fullName described by
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
     * </pre>
     *
     * <code>repeated string crl_distribution_points = 6;</code>
     *
     * @return This builder for chaining.
     */
    public Builder clearCrlDistributionPoints() {
      crlDistributionPoints_ = com.google.protobuf.LazyStringArrayList.EMPTY;
      bitField0_ = (bitField0_ & ~0x00000020);
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes a list of locations to obtain CRL information, i.e.
     * the DistributionPoint.fullName described by
     * https://tools.ietf.org/html/rfc5280#section-4.2.1.13
     * </pre>
     *
     * <code>repeated string crl_distribution_points = 6;</code>
     *
     * @param value The bytes of the crlDistributionPoints to add.
     * @return This builder for chaining.
     */
    public Builder addCrlDistributionPointsBytes(com.google.protobuf.ByteString value) {
      if (value == null) {
        throw new NullPointerException();
      }
      checkByteStringIsUtf8(value);
      ensureCrlDistributionPointsIsMutable();
      crlDistributionPoints_.add(value);
      onChanged();
      return this;
    }

    private com.google.protobuf.LazyStringList aiaIssuingCertificateUrls_ =
        com.google.protobuf.LazyStringArrayList.EMPTY;

    private void ensureAiaIssuingCertificateUrlsIsMutable() {
      if (!((bitField0_ & 0x00000040) != 0)) {
        aiaIssuingCertificateUrls_ =
            new com.google.protobuf.LazyStringArrayList(aiaIssuingCertificateUrls_);
        bitField0_ |= 0x00000040;
      }
    }
    /**
     *
     *
     * <pre>
     * Describes lists of issuer CA certificate URLs that appear in the
     * "Authority Information Access" extension in the certificate.
     * </pre>
     *
     * <code>repeated string aia_issuing_certificate_urls = 7;</code>
     *
     * @return A list containing the aiaIssuingCertificateUrls.
     */
    public com.google.protobuf.ProtocolStringList getAiaIssuingCertificateUrlsList() {
      return aiaIssuingCertificateUrls_.getUnmodifiableView();
    }
    /**
     *
     *
     * <pre>
     * Describes lists of issuer CA certificate URLs that appear in the
     * "Authority Information Access" extension in the certificate.
     * </pre>
     *
     * <code>repeated string aia_issuing_certificate_urls = 7;</code>
     *
     * @return The count of aiaIssuingCertificateUrls.
     */
    public int getAiaIssuingCertificateUrlsCount() {
      return aiaIssuingCertificateUrls_.size();
    }
    /**
     *
     *
     * <pre>
     * Describes lists of issuer CA certificate URLs that appear in the
     * "Authority Information Access" extension in the certificate.
     * </pre>
     *
     * <code>repeated string aia_issuing_certificate_urls = 7;</code>
     *
     * @param index The index of the element to return.
     * @return The aiaIssuingCertificateUrls at the given index.
     */
    public java.lang.String getAiaIssuingCertificateUrls(int index) {
      return aiaIssuingCertificateUrls_.get(index);
    }
    /**
     *
     *
     * <pre>
     * Describes lists of issuer CA certificate URLs that appear in the
     * "Authority Information Access" extension in the certificate.
     * </pre>
     *
     * <code>repeated string aia_issuing_certificate_urls = 7;</code>
     *
     * @param index The index of the value to return.
     * @return The bytes of the aiaIssuingCertificateUrls at the given index.
     */
    public com.google.protobuf.ByteString getAiaIssuingCertificateUrlsBytes(int index) {
      return aiaIssuingCertificateUrls_.getByteString(index);
    }
    /**
     *
     *
     * <pre>
     * Describes lists of issuer CA certificate URLs that appear in the
     * "Authority Information Access" extension in the certificate.
     * </pre>
     *
     * <code>repeated string aia_issuing_certificate_urls = 7;</code>
     *
     * @param index The index to set the value at.
     * @param value The aiaIssuingCertificateUrls to set.
     * @return This builder for chaining.
     */
    public Builder setAiaIssuingCertificateUrls(int index, java.lang.String value) {
      if (value == null) {
        throw new NullPointerException();
      }
      ensureAiaIssuingCertificateUrlsIsMutable();
      aiaIssuingCertificateUrls_.set(index, value);
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes lists of issuer CA certificate URLs that appear in the
     * "Authority Information Access" extension in the certificate.
     * </pre>
     *
     * <code>repeated string aia_issuing_certificate_urls = 7;</code>
     *
     * @param value The aiaIssuingCertificateUrls to add.
     * @return This builder for chaining.
     */
    public Builder addAiaIssuingCertificateUrls(java.lang.String value) {
      if (value == null) {
        throw new NullPointerException();
      }
      ensureAiaIssuingCertificateUrlsIsMutable();
      aiaIssuingCertificateUrls_.add(value);
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes lists of issuer CA certificate URLs that appear in the
     * "Authority Information Access" extension in the certificate.
     * </pre>
     *
     * <code>repeated string aia_issuing_certificate_urls = 7;</code>
     *
     * @param values The aiaIssuingCertificateUrls to add.
     * @return This builder for chaining.
     */
    public Builder addAllAiaIssuingCertificateUrls(java.lang.Iterable<java.lang.String> values) {
      ensureAiaIssuingCertificateUrlsIsMutable();
      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, aiaIssuingCertificateUrls_);
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes lists of issuer CA certificate URLs that appear in the
     * "Authority Information Access" extension in the certificate.
     * </pre>
     *
     * <code>repeated string aia_issuing_certificate_urls = 7;</code>
     *
     * @return This builder for chaining.
     */
    public Builder clearAiaIssuingCertificateUrls() {
      aiaIssuingCertificateUrls_ = com.google.protobuf.LazyStringArrayList.EMPTY;
      bitField0_ = (bitField0_ & ~0x00000040);
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * Describes lists of issuer CA certificate URLs that appear in the
     * "Authority Information Access" extension in the certificate.
     * </pre>
     *
     * <code>repeated string aia_issuing_certificate_urls = 7;</code>
     *
     * @param value The bytes of the aiaIssuingCertificateUrls to add.
     * @return This builder for chaining.
     */
    public Builder addAiaIssuingCertificateUrlsBytes(com.google.protobuf.ByteString value) {
      if (value == null) {
        throw new NullPointerException();
      }
      checkByteStringIsUtf8(value);
      ensureAiaIssuingCertificateUrlsIsMutable();
      aiaIssuingCertificateUrls_.add(value);
      onChanged();
      return this;
    }

    private com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
        certFingerprint_;
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint,
            com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                .Builder,
            com.google.cloud.security.privateca.v1.CertificateDescription
                .CertificateFingerprintOrBuilder>
        certFingerprintBuilder_;
    /**
     *
     *
     * <pre>
     * The hash of the x.509 certificate.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
     * </code>
     *
     * @return Whether the certFingerprint field is set.
     */
    public boolean hasCertFingerprint() {
      return ((bitField0_ & 0x00000080) != 0);
    }
    /**
     *
     *
     * <pre>
     * The hash of the x.509 certificate.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
     * </code>
     *
     * @return The certFingerprint.
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
        getCertFingerprint() {
      if (certFingerprintBuilder_ == null) {
        return certFingerprint_ == null
            ? com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                .getDefaultInstance()
            : certFingerprint_;
      } else {
        return certFingerprintBuilder_.getMessage();
      }
    }
    /**
     *
     *
     * <pre>
     * The hash of the x.509 certificate.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
     * </code>
     */
    public Builder setCertFingerprint(
        com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
            value) {
      if (certFingerprintBuilder_ == null) {
        if (value == null) {
          throw new NullPointerException();
        }
        certFingerprint_ = value;
      } else {
        certFingerprintBuilder_.setMessage(value);
      }
      bitField0_ |= 0x00000080;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * The hash of the x.509 certificate.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
     * </code>
     */
    public Builder setCertFingerprint(
        com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint.Builder
            builderForValue) {
      if (certFingerprintBuilder_ == null) {
        certFingerprint_ = builderForValue.build();
      } else {
        certFingerprintBuilder_.setMessage(builderForValue.build());
      }
      bitField0_ |= 0x00000080;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * The hash of the x.509 certificate.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
     * </code>
     */
    public Builder mergeCertFingerprint(
        com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
            value) {
      if (certFingerprintBuilder_ == null) {
        if (((bitField0_ & 0x00000080) != 0)
            && certFingerprint_ != null
            && certFingerprint_
                != com.google.cloud.security.privateca.v1.CertificateDescription
                    .CertificateFingerprint.getDefaultInstance()) {
          getCertFingerprintBuilder().mergeFrom(value);
        } else {
          certFingerprint_ = value;
        }
      } else {
        certFingerprintBuilder_.mergeFrom(value);
      }
      bitField0_ |= 0x00000080;
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * The hash of the x.509 certificate.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
     * </code>
     */
    public Builder clearCertFingerprint() {
      bitField0_ = (bitField0_ & ~0x00000080);
      certFingerprint_ = null;
      if (certFingerprintBuilder_ != null) {
        certFingerprintBuilder_.dispose();
        certFingerprintBuilder_ = null;
      }
      onChanged();
      return this;
    }
    /**
     *
     *
     * <pre>
     * The hash of the x.509 certificate.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
     * </code>
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
            .Builder
        getCertFingerprintBuilder() {
      bitField0_ |= 0x00000080;
      onChanged();
      return getCertFingerprintFieldBuilder().getBuilder();
    }
    /**
     *
     *
     * <pre>
     * The hash of the x.509 certificate.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
     * </code>
     */
    public com.google.cloud.security.privateca.v1.CertificateDescription
            .CertificateFingerprintOrBuilder
        getCertFingerprintOrBuilder() {
      if (certFingerprintBuilder_ != null) {
        return certFingerprintBuilder_.getMessageOrBuilder();
      } else {
        return certFingerprint_ == null
            ? com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                .getDefaultInstance()
            : certFingerprint_;
      }
    }
    /**
     *
     *
     * <pre>
     * The hash of the x.509 certificate.
     * </pre>
     *
     * <code>
     * .google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint cert_fingerprint = 8;
     * </code>
     */
    private com.google.protobuf.SingleFieldBuilderV3<
            com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint,
            com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                .Builder,
            com.google.cloud.security.privateca.v1.CertificateDescription
                .CertificateFingerprintOrBuilder>
        getCertFingerprintFieldBuilder() {
      if (certFingerprintBuilder_ == null) {
        certFingerprintBuilder_ =
            new com.google.protobuf.SingleFieldBuilderV3<
                com.google.cloud.security.privateca.v1.CertificateDescription
                    .CertificateFingerprint,
                com.google.cloud.security.privateca.v1.CertificateDescription.CertificateFingerprint
                    .Builder,
                com.google.cloud.security.privateca.v1.CertificateDescription
                    .CertificateFingerprintOrBuilder>(
                getCertFingerprint(), getParentForChildren(), isClean());
        certFingerprint_ = null;
      }
      return certFingerprintBuilder_;
    }

    @java.lang.Override
    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
      return super.setUnknownFields(unknownFields);
    }

    @java.lang.Override
    public final Builder mergeUnknownFields(
        final com.google.protobuf.UnknownFieldSet unknownFields) {
      return super.mergeUnknownFields(unknownFields);
    }

    // @@protoc_insertion_point(builder_scope:google.cloud.security.privateca.v1.CertificateDescription)
  }

  // @@protoc_insertion_point(class_scope:google.cloud.security.privateca.v1.CertificateDescription)
  private static final com.google.cloud.security.privateca.v1.CertificateDescription
      DEFAULT_INSTANCE;

  static {
    DEFAULT_INSTANCE = new com.google.cloud.security.privateca.v1.CertificateDescription();
  }

  public static com.google.cloud.security.privateca.v1.CertificateDescription getDefaultInstance() {
    return DEFAULT_INSTANCE;
  }

  private static final com.google.protobuf.Parser<CertificateDescription> PARSER =
      new com.google.protobuf.AbstractParser<CertificateDescription>() {
        @java.lang.Override
        public CertificateDescription parsePartialFrom(
            com.google.protobuf.CodedInputStream input,
            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
            throws com.google.protobuf.InvalidProtocolBufferException {
          Builder builder = newBuilder();
          try {
            builder.mergeFrom(input, extensionRegistry);
          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
            throw e.setUnfinishedMessage(builder.buildPartial());
          } catch (com.google.protobuf.UninitializedMessageException e) {
            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
          } catch (java.io.IOException e) {
            throw new com.google.protobuf.InvalidProtocolBufferException(e)
                .setUnfinishedMessage(builder.buildPartial());
          }
          return builder.buildPartial();
        }
      };

  public static com.google.protobuf.Parser<CertificateDescription> parser() {
    return PARSER;
  }

  @java.lang.Override
  public com.google.protobuf.Parser<CertificateDescription> getParserForType() {
    return PARSER;
  }

  @java.lang.Override
  public com.google.cloud.security.privateca.v1.CertificateDescription getDefaultInstanceForType() {
    return DEFAULT_INSTANCE;
  }
}
