{% extends "base.html" %}
{% block title %}Download profile — Certificate Portal{% endblock %}
{% block content %}
<section class="card">
  <h1>Your certificate profile</h1>
  <p>Signed in as <strong>{{ user.name }}</strong> <span class="muted">({{ user.username }})</span></p>

  {% if error %}
    <p class="banner error" role="alert">{{ error }}</p>
  {% endif %}

  {% if directory_user %}
    <dl class="facts">
      <dt>User principal name</dt>
      <dd><code>{{ directory_user.upn }}</code></dd>
      <dt>SID</dt>
      <dd><code>{{ directory_user.sid }}</code></dd>
      <dt>Display name</dt>
      <dd>{{ directory_user.display_name }}</dd>
    </dl>
    <p>
      Downloading enrolls a new certificate now. The CA will see the portal
      service account as the requester; your identity is in the certificate SAN
      (UPN and SID URI).
    </p>
    <form method="post" action="/download">
      <button class="button" type="submit">Download certificate profile</button>
    </form>
  {% elif not error %}
    <p class="muted">Looking up your directory account…</p>
  {% endif %}

  <p><a href="/help">How to install the profile</a></p>
</section>
{% endblock %}