# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.

CertPasswordPrompt = Please enter the password for the PKCS#11 token %S.
CertPasswordPromptDefault = Please enter your Primary Password.

# The following strings have special requirements: they must fit in a 32 or 64
# bytes buffer after being encoded to UTF-8.
#
# It's possible to verify the length of a translation using the Browser Console
# in IceCat and evaluating the following code:
#
# (new TextEncoder().encode('YOURSTRING')).length
#
# Simply replace YOURSTRING with your translation.
#
# If it's not possible to produce an understandable translation within these
# limits, keeping the English text is an acceptable workaround.

# LOCALIZATION NOTE (RootCertModuleName): string limit is 64 bytes after
# conversion to UTF-8.
# length_limit = 64 bytes
RootCertModuleName = Builtin Roots Module
# LOCALIZATION NOTE (ManufacturerID): string limit is 32 bytes after conversion
# to UTF-8.
# length_limit = 32 bytes
ManufacturerID = Mozilla.org
# LOCALIZATION NOTE (LibraryDescription): string limit is 32 bytes after
# conversion to UTF-8.
# length_limit = 32 bytes
LibraryDescription = PSM Internal Crypto Services
# LOCALIZATION NOTE (TokenDescription): string limit is 32 bytes after
# conversion to UTF-8.
# length_limit = 32 bytes
TokenDescription = Generic Crypto Services
# LOCALIZATION NOTE (PrivateTokenDescription): string limit is 32 bytes after
# conversion to UTF-8.
# length_limit = 32 bytes
PrivateTokenDescription = Software Security Device
# LOCALIZATION NOTE (SlotDescription): string limit is 64 bytes after conversion
# to UTF-8.
# length_limit = 64 bytes
SlotDescription = PSM Internal Cryptographic Services
# LOCALIZATION NOTE (PrivateSlotDescription): string limit is 64 bytes after
# conversion to UTF-8.
# length_limit = 64 bytes
PrivateSlotDescription = PSM Private Keys
# LOCALIZATION NOTE (Fips140TokenDescription): string limit is 32 bytes after
# conversion to UTF-8.
# length_limit = 32 bytes
Fips140TokenDescription = Software Security Device (FIPS)
# LOCALIZATION NOTE (Fips140SlotDescription): string limit is 64 bytes after
# conversion to UTF-8.
# length_limit = 64 bytes
Fips140SlotDescription = FIPS 140 Cryptographic, Key and Certificate Services
# LOCALIZATION NOTE (nick_template): $1s is the common name from a cert (e.g. "Mozilla"), $2s is the CA name (e.g. VeriSign)
nick_template = %1$s’s %2$s ID
CertDumpKUSign = Signing
CertDumpKUNonRep = Non-repudiation
CertDumpKUEnc = Key Encipherment
CertDumpKUDEnc = Data Encipherment
CertDumpKUKA = Key Agreement
CertDumpKUCertSign = Certificate Signer
CertDumpKUCRLSigner = CRL Signer
PSMERR_SSL_Disabled = Can’t connect securely because the SSL protocol has been disabled.
PSMERR_SSL2_Disabled = Can’t connect securely because the site uses an older, insecure version of the SSL protocol.
PSMERR_HostReusedIssuerSerial = You have received an invalid certificate.  Please contact the server administrator or email correspondent and give them the following information:\n\nYour certificate contains the same serial number as another certificate issued by the certificate authority.  Please get a new certificate containing a unique serial number.
# LOCALIZATION NOTE (SSLConnectionErrorPrefix2): %1$S is the host string, %2$S is more detailed information (localized as well).
SSLConnectionErrorPrefix2 = An error occurred during a connection to %1$S. %2$S\n
certErrorIntro = %S uses an invalid security certificate.
certErrorTrust_SelfSigned = The certificate is not trusted because it is self-signed.
certErrorTrust_UnknownIssuer = The certificate is not trusted because the issuer certificate is unknown.
certErrorTrust_UnknownIssuer2 = The server might not be sending the appropriate intermediate certificates.
certErrorTrust_UnknownIssuer3 = An additional root certificate may need to be imported.
certErrorTrust_CaInvalid = The certificate is not trusted because it was issued by an invalid CA certificate.
certErrorTrust_Issuer = The certificate is not trusted because the issuer certificate is not trusted.
certErrorTrust_SignatureAlgorithmDisabled = The certificate is not trusted because it was signed using a signature algorithm that was disabled because that algorithm is not secure.
certErrorTrust_ExpiredIssuer = The certificate is not trusted because the issuer certificate has expired.
certErrorTrust_Untrusted = The certificate does not come from a trusted source.
certErrorTrust_MitM = Your connection is being intercepted by a TLS proxy. Uninstall it if possible or configure your device to trust its root certificate.
certErrorMismatch = The certificate is not valid for the name %S.
# LOCALIZATION NOTE (certErrorMismatchSinglePrefix): %S is replaced by the domain for which the certificate is valid
certErrorMismatchSinglePrefix = The certificate is only valid for %S.
certErrorMismatchMultiple = The certificate is only valid for the following names:
# LOCALIZATION NOTE (certErrorExpiredNow): Do not translate %1$S (date+time of expired certificate) or %2$S (current date+time)
certErrorExpiredNow = The certificate expired on %1$S. The current time is %2$S.
# LOCALIZATION NOTE (certErrorNotYetValidNow): Do not translate %1$S (date+time certificate will become valid) or %2$S (current date+time)
certErrorNotYetValidNow = The certificate will not be valid until %1$S. The current time is %2$S.
certErrorMitM = Web sites prove their identity via certificates, which are issued by certificate authorities.
# LOCALIZATION NOTE (certErrorMitM2): %S is brandShortName
certErrorMitM2 = %S is backed by the non-profit Mozilla, which administers a completely open certificate authority (CA) store. The CA store helps ensure that certificate authorities are following best practices for user security.
# LOCALIZATION NOTE (certErrorMitM3): %S is brandShortName
certErrorMitM3 = %S uses the GNU CA store to verify that a connection is secure, rather than certificates supplied by the user’s operating system. So, if an antivirus program or a network is intercepting a connection with a security certificate issued by a CA that is not in the GNU CA store, the connection is considered unsafe.
certErrorSymantecDistrustAdministrator = You may notify the web site’s administrator about this problem.
# LOCALIZATION NOTE (certErrorCodePrefix3): %S is replaced by the error code.
certErrorCodePrefix3 = Error code: %S
P12DefaultNickname = Imported Certificate
CertUnknown = Unknown
CertNoEmailAddress = (no email address)
CaCertExists = This certificate is already installed as a certificate authority.
NotACACert = This is not a certificate authority certificate, so it can’t be imported into the certificate authority list.
UserCertIgnoredNoPrivateKey = This personal certificate can’t be installed because you do not own the corresponding private key which was created when the certificate was requested.
UserCertImported = Your personal certificate has been installed. You should keep a backup copy of this certificate.
CertOrgUnknown = (Unknown)
CertNotStored = (Not Stored)
CertExceptionPermanent = Permanent
CertExceptionTemporary = Temporary