ohne-rezept-bestellung.de

Issued by R3

About this certificate

This digital certificate with serial number 03:94:03:b7:88:2c:25:8f:9f:53:d0:b1:74:18:d8:d1:a1:5e was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ohne-rezept-bestellung.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:03:b7:88:2c:25:8f:9f:53:d0:b1:74:18:d8:d1:a1:5e
Serial Number (int): 311703588735797468974938664542637992812894
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:2a:bf:51:a0:f6:b6:77:65:b7:4e:9c:bd:34:4b:b8:39:a1:ae:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 95:a5:31:6c:d9:32:59:7f:35:3d:39:2e:c7:53:07:3e:ea:74:12:f7
Fingerprint (sha256): 0b:c0:d4:05:01:a6:2c:e3:fd:cf:3a:b5:17:91:9a:5f:6f:f5:f9:b2:af:1f:7b:d5:cf:34:aa:82:b6:bd:d8:e9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ohne-rezept-bestellung.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ohne-rezept-bestellung.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actcola.com
appideas.equi.life
cleartoenails.com
dnkservices.com
ohne-rezept-bestellung.de
onecloudmanagement.com
perfumecoupon.com
retirement401krollovers.com.phonographneedles.com
roseauconstruction.com
suckings.com.designforvip.com
swealthytreats.com.digital-reality.com
texaswomanevents.com
thekidscollege.com

Other certificates including the domain name ohne-rezept-bestellung.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for ohne-rezept-bestellung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgISA5QDt4gsJY+fU9CxdBjY0aFeMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDgyMTE2MDdaFw0yNDAzMDcyMTE2MDZaMCQxIjAgBgNVBAMT
GW9obmUtcmV6ZXB0LWJlc3RlbGx1bmcuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP+09y+s6BOLsYu2sAKPxoGEGJ2j2Ye+pwVGNfNaE+UgZbdUQC
AwPm6U6GXwnnN2nKeeYalhqqUVMjGhYwuHj+P3e7/8gXkgbEf6iH0IMK+8wm4L+q
GoC0svDmA/b/VXYTAD3SVSTWhUbZh6FhvAxJlur1laV3eZF6X7CtW5ypGx0VcvDw
w8cQ+7kJeh58fQJ1WBPtWojAZCH2dKs7dFvU7dAfA/WOesq8DhTDtZVm1Dcag2ft
jqJUg1H7s3HfNBsusmgg9aJHQIJ6uihevS62KEPLbFiRmzrnbteqk32SJi4UQV/h
fehY8ABnEm5X9VOIN6P7LC8VyLpCRlS65LWxAgMBAAGjggNOMIIDSjAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFJAqv1Gg9rZ3ZbdOnL00S7g5oa7hMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIBVAYDVR0RBIIBSzCCAUeCC2FjdGNvbGEuY29tghJhcHBp
ZGVhcy5lcXVpLmxpZmWCEWNsZWFydG9lbmFpbHMuY29tgg9kbmtzZXJ2aWNlcy5j
b22CGW9obmUtcmV6ZXB0LWJlc3RlbGx1bmcuZGWCFm9uZWNsb3VkbWFuYWdlbWVu
dC5jb22CEXBlcmZ1bWVjb3Vwb24uY29tgjFyZXRpcmVtZW50NDAxa3JvbGxvdmVy
cy5jb20ucGhvbm9ncmFwaG5lZWRsZXMuY29tghZyb3NlYXVjb25zdHJ1Y3Rpb24u
Y29tgh1zdWNraW5ncy5jb20uZGVzaWduZm9ydmlwLmNvbYImc3dlYWx0aHl0cmVh
dHMuY29tLmRpZ2l0YWwtcmVhbGl0eS5jb22CFHRleGFzd29tYW5ldmVudHMuY29t
ghJ0aGVraWRzY29sbGVnZS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgor
BgEEAdZ5AgQCBIH2BIHzAPEAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv
4frUFwAAAYxLgJUlAAAEAwBHMEUCIQCKDW/r21Z2p7OT8I7uODAS7K8X/UhBCKUy
uQ0PDeCiGgIgfhGV66ztMPBsHT0VBhQtKPfQrb7JZZKyB2dRvW/GaZUAdwB2/4g/
Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYxLgJXQAAAEAwBIMEYCIQDP
JEwNGuQtI7S7G4PkxhlKPns36tDqaxXUVoccvO7LYgIhAIHRevHxGMhPzIc5eUUK
NhJ5rL+xYHcAAo1wEfNUZUeBMA0GCSqGSIb3DQEBCwUAA4IBAQBNPtJRN93CwOys
FmPEoWQuGnlWaYHQ+OEseMgckv4+Joski/8BeOjsAob+Qxb04qb+wHNIaW2SYTJE
h2iICeQmW3e750vs083HMrnD+GeYtOGvHaB2Qn2vzEXLC6f5ZeY48t/T2lXnXi7X
rMYc2Ag3jWrlrQq3aPpvhsTY9uJJ1codG5Y5nAQ1xo8WxKahTpGSqnlZp+Kcgq3y
KG1xES/wBQ+Ip7tqXASiJzz9oA/xVYIRoleYI2BONDo0xs+CVEL1nXYMDn2/jZI6
sYKRlGlT9+XD8sbjI5bnzRqFIqELfdm7wwIzMGIKAhZV1Ito1/NpJD2OBzPTTcXd
5o89b3Dx
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/tPcvrOgTi7GLtrACj8
aBhBido9mHvqcFRjXzWhPlIGW3VEAgMD5ulOhl8J5zdpynnmGpYaqlFTIxoWMLh4
/j93u//IF5IGxH+oh9CDCvvMJuC/qhqAtLLw5gP2/1V2EwA90lUk1oVG2YehYbwM
SZbq9ZWld3mRel+wrVucqRsdFXLw8MPHEPu5CXoefH0CdVgT7VqIwGQh9nSrO3Rb
1O3QHwP1jnrKvA4Uw7WVZtQ3GoNn7Y6iVINR+7Nx3zQbLrJoIPWiR0CCerooXr0u
tihDy2xYkZs6527XqpN9kiYuFEFf4X3oWPAAZxJuV/VTiDej+ywvFci6QkZUuuS1
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311703588735797468974938664542637992812894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 21:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 21:16:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ohne-rezept-bestellung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26255254879448153680623903201756706484913386894620976821016770103462294235643854758561718031086095879246217250285666759653057813777469226837121940993253146629754234984408813207033753154153587939398882957250884714828532247742428251377015287815293011430283555401628885150528781836663604271065127899150370483580280630976979314512107493329069393315249006920554807427768865618274745206059686668676223455367833445707541922684646277096885113259441557609242168780308287038959391760008967422264230376890695577810691082311360448411371149870851623651143184342899989709346948677479066963461396011352741188770439118452059697100209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							902abf51a0f6b67765b74e9cbd344bb839a1aee1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actcola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appideas.equi.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleartoenails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnkservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohne-rezept-bestellung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecloudmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfumecoupon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement401krollovers.com.phonographneedles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseauconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suckings.com.designforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swealthytreats.com.digital-reality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswomanevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekidscollege.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c4b80952500000403004730450221008a0d6febdb5676a7b393f08eee383012ecaf17fd484108a532b90d0f0de0a21a02207e1195ebaced30f06c1d3d1506142d28f7d0adbec96592b2076751bd6fc6699500770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c4b8095d00000040300483046022100cf244c0d1ae42d23b4bb1b83e4c6194a3e7b37ead0ea6b15d456871cbceecb6202210081d17af1f118c84fcc873979450a361279acbfb1607700028d7011f354654781
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004d3ed25137ddc2c0ecac1663c4a1642e1a79566981d0f8e12c78c81c92fe3e268b248bff0178e8ec0286fe4316f4e2a6fec07348696d9261324487688809e4265b77bbe74becd3cdc732b9c3f86798b4e1af1da076427dafcc45cb0ba7f965e638f2dfd3da55e75e2ed7acc61cd808378d6ae5ad0ab768fa6f86c4d8f6e249d5ca1d1b96399c0435c68f16c4a6a14e9192aa7959a7e29c82adf2286d71112ff0050f88a7bb6a5c04a2273cfda00ff1558211a2579823604e343a34c6cf825442f59d760c0e7dbf8d923ab18291946953f7e5c3f2c6e32396e7cd1a8522a10b7dd9bbc3023330620a021655d48b68d7f369243d8e0733d34dc5dde68f3d6f70f1