*.imperfectfoods.co

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:71:61:29:ea:52:62:c0:fc:d7:af:da:8b:b2:06:06 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.imperfectfoods.co

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:71:61:29:ea:52:62:c0:fc:d7:af:da:8b:b2:06:06
Serial Number (int): 15210208213253817988147341189083956742
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 97:70:38:bc:19:18:83:63:41:dc:e0:01:63:e3:fe:da:6c:3c:af:c6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 59:e5:3f:66:ed:76:3a:3b:0e:af:37:ca:29:91:de:c7:35:60:3d:40
Fingerprint (sha256): 00:e3:14:9e:7d:85:e6:49:a9:23:b1:dc:cc:4e:ed:26:21:4c:16:9f:2f:a2:2d:1e:e8:e0:14:1e:ef:6e:d1:5c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.imperfectfoods.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.imperfectfoods.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.imperfectfoods.co

Other certificates including the domain name imperfectfoods.co

(limited to 100 certificates)
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
get.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
get.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
get.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co
*.imperfectfoods.co

Certificate

The complete raw certificate details for *.imperfectfoods.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEcTCCA1mgAwIBAgIQC3FhKepSYsD816/ai7IGBjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMDMwMDAwMDBaFw0yMzAxMDEy
MzU5NTlaMB4xHDAaBgNVBAMMEyouaW1wZXJmZWN0Zm9vZHMuY28wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfcwMzlffhogJij/PQzS5rdUoX3EHRLfH
PClGyJ/GVQiMkpm1/0jf+uDAOGw26m8obFuc7e/RXiGTjwO5YpwkdgHc/sJRU+KP
RE7f7Nl68kSWE/4Q4uHNrr2Q87qMbXKzt4jjrnjZ9sG6b6GvPZkGY1XRRGCnj3no
v4GV+2G8wqnt4spUUHy18RGVuIOYbkRF7YzIDAJYFWxHS1p/yZiGwLpSjxQb5nkB
jNGyfZQzK53zatdfcaTkax9I03kt4eV70upBFA8D/gKy8yvBMq0e8L8MaIpvfrtQ
cIoGS1LO38KfYWxxK6wDph41VpWPaiEgIMZv8EeQij5jS47Vo2evAgMBAAGjggGB
MIIBfTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU
l3A4vBkYg2NB3OABY+P+2mw8r8YwHgYDVR0RBBcwFYITKi5pbXBlcmZlY3Rmb29k
cy5jbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1
c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUF
BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1
c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0
LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAXPx96+Ee6/dVy5UaIvI9VNJSmKmDhzlPoYXs
57/aD2Z/CN48e07QOb3MFHGbQOC5xwJnBmscJV6OswG9ahAdVG/WC7M6vTDeaGgm
bk5O+lA14h4TqG5M/zOCWfGfTtM0cGPPtOt9d0VlKi5XXq2ffN6TQ+HqrVHT6X8K
XTjskmPS+BBKidruaWkJzKFKGG34Qi89z/4+43Pzcvl6vU7mk1cHnHaZ9p6TB6S1
T4v51K5t7l88A/zZS2OiiLW0+sp59MXVtVWoW0lCaLCfXSrQ0YS9/nI2dNTNUAbL
tczMx5nH2nHoWCBG1EmMbVnN3U3TqWcSGrdnnzZKSbCLtojlqg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX3MDM5X34aICYo/z0M0
ua3VKF9xB0S3xzwpRsifxlUIjJKZtf9I3/rgwDhsNupvKGxbnO3v0V4hk48DuWKc
JHYB3P7CUVPij0RO3+zZevJElhP+EOLhza69kPO6jG1ys7eI46542fbBum+hrz2Z
BmNV0URgp4956L+BlfthvMKp7eLKVFB8tfERlbiDmG5ERe2MyAwCWBVsR0taf8mY
hsC6Uo8UG+Z5AYzRsn2UMyud82rXX3Gk5GsfSNN5LeHle9LqQRQPA/4CsvMrwTKt
HvC/DGiKb367UHCKBktSzt/Cn2FscSusA6YeNVaVj2ohICDGb/BHkIo+Y0uO1aNn
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15210208213253817988147341189083956742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.imperfectfoods.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21901259606540478144450938404565186230863433764868991846635752769312518028569259183206062045975445207095565573254461355497792064279316858680932890272946731628743755154501528311913568466965689446351984224510425883677291496734942930482803816740432434601370260089720647092262005929203486667982286422001178011631542744881553281702999064940304556299320844625495718411032870999869302167099194617097843846128577191514637261840897343402871124828287860619380605354905711668322005073463393089695206272923744760269310228811992453527178058699754092089865666161813251647790131426527282273408145570328132831096122077080722925119407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							977038bc1918836341dce00163e3feda6c3cafc6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperfectfoods.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005cfc7debe11eebf755cb951a22f23d54d25298a98387394fa185ece7bfda0f667f08de3c7b4ed039bdcc14719b40e0b9c70267066b1c255e8eb301bd6a101d546fd60bb33abd30de6868266e4e4efa5035e21e13a86e4cff338259f19f4ed3347063cfb4eb7d7745652a2e575ead9f7cde9343e1eaad51d3e97f0a5d38ec9263d2f8104a89daee696909cca14a186df8422f3dcffe3ee373f372f97abd4ee69357079c7699f69e9307a4b54f8bf9d4ae6dee5f3c03fcd94b63a288b5b4faca79f4c5d5b555a85b494268b09f5d2ad0d184bdfe723674d4cd5006cbb5ccccc799c7da71e8582046d4498c6d59cddd4dd3a967121ab7679f364a49b08bb688e5aa