ExpirationDate time.Time

	// ExternallyManaged defines if the certificate is externally managed, that is when
	// the signing CA certificate is provided without the certificate key (In this case kubeadm can't renew the certificate)
	ExternallyManaged bool
}

// newExpirationInfo returns a new ExpirationInfo
func newExpirationInfo(name string, cert *x509.Certificate, externallyManaged bool) *ExpirationInfo {
	return &ExpirationInfo{

	switch caBaseName {
	case kubeadmconstants.CACertAndKeyBaseName:
		externallyManaged, err := certsphase.UsingExternalCA(rm.cfg)
		if err != nil {
			return false, errors.Wrapf(err, "Error checking external CA condition for %s certificate authority", caBaseName)
		}
		return externallyManaged, nil
	case kubeadmconstants.FrontProxyCACertAndKeyBaseName:
		externallyManaged, err := certsphase.UsingExternalFrontProxyCA(rm.cfg)
		if err != nil {

	// ResidualTimeSeconds represents the duration in seconds relative to the residual time before expiration.
	ResidualTimeSeconds int64 `json:"residualTime"`

	// ExternallyManaged defines if the certificate is externally managed.
	ExternallyManaged bool `json:"externallyManaged"`

	// CAName represents the name of the CA that signed the certificate.
	// This field is empty for self-signed, root CA certificates.

	ExpirationDate metav1.Time

	// ResidualTimeSeconds represents the duration in seconds relative to the residual time before expiration.
	ResidualTimeSeconds int64

	// ExternallyManaged defines if the certificate is externally managed.
	ExternallyManaged bool

	// CAName represents the name of the CA that signed the certificate.
	// This field is empty for self-signed, root CA certificates.
	CAName string

	out.Name = in.Name
	out.ExpirationDate = in.ExpirationDate
	out.ResidualTimeSeconds = in.ResidualTimeSeconds
	out.ExternallyManaged = in.ExternallyManaged
	out.CAName = in.CAName
	out.Missing = in.Missing
	return nil
}

// Convert_v1alpha3_Certificate_To_output_Certificate is an autogenerated conversion function.

				Name:                e.Name,
				ExpirationDate:      metav1.Time{Time: e.ExpirationDate},
				ResidualTimeSeconds: int64(e.ResidualTime() / time.Second),
				CAName:              handler.CAName,
				ExternallyManaged:   e.ExternallyManaged,
			})
		} else {
			// the certificate does not exist (for any reason)
			info.Certificates = append(info.Certificates, outputapiv1alpha3.Certificate{
				Name:    handler.Name,
				Missing: true,