sip.helmholtz-berlin.de

- Helmholtz-Zentrum Berlin für Materialien und Energie GmbH -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number a0:9c:d5:1f:a4:be:f7:67:68:08:5a:11:49:11:88:37 was issued on by GEANT Vereniging.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helmholtz-Zentrum Berlin für Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin für Materialien und Energie GmbH
State / Province: Berlin
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): a0:9c:d5:1f:a4:be:f7:67:68:08:5a:11:49:11:88:37
Serial Number (int): 213490800295822994371114273055154735159
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e7:fe:5a:58:55:32:03:00:67:aa:a5:cd:e4:ea:d0:0c:c4:c8:a2:7d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 99:de:4a:fe:63:7a:b0:5b:c4:83:e3:6b:a2:78:9d:fc:fc:67:7a:94
Fingerprint (sha256): 62:f5:63:fa:45:44:36:7e:2b:a5:fe:5d:9b:6a:af:23:f6:8f:d6:e1:e1:64:32:03:61:4f:c7:a0:04:70:52:b0

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate sip.helmholtz-berlin.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.helmholtz-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.helmholtz-berlin.de
helmholtz-berlin.de
lyncdiscover.helmholtz-berlin.de
lyncweb.helmholtz-berlin.de
meet.helmholtz-berlin.de
webconf.helmholtz-berlin.de

Other certificates including the domain name helmholtz-berlin.de

(limited to 100 certificates)
gate.helmholtz-berlin.de
portal.helmholtz-berlin.de
webapp.basisit.de
ise-psn-a-1.helmholtz-berlin.de
imap.helmholtz-berlin.de
ess.helmholtz-berlin.de
divuwiki.basisit.de
dms.helmholtz-berlin.de
nc.helmholtz-berlin.de
workadventure.helmholtz-berlin.de
collab.helmholtz-berlin.de
rica.helmholtz-berlin.de
rica.helmholtz-berlin.de
nc.basisit.de
kanboard.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
imap.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
mail.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
lyncpool.basisit.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
ebisscattest.helmholtz-berlin.de
nubes.helmholtz-berlin.de
divlog.helmholtz-berlin.de
indico.helmholtz-berlin.de
imap.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
mail.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
www.helmholtz-berlin.de
sas.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
dect-controller-01.voip.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
smtp.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
www.helmholtz-berlin.de
hc-awx.basisit.de
ebisscatprod.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
nc.basisit.de
onlyoffice.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
sbc-gw-01.voip.helmholtz-berlin.de
webapp.basisit.de
mapi.helmholtz-berlin.de
portal.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
office.helmholtz-berlin.de
icat.helmholtz-berlin.de
dirac-meister.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
ise-psn-w-2.helmholtz-berlin.de
indico.helmholtz-berlin.de
rica.helmholtz-berlin.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
rica.helmholtz-berlin.de
portal-hzb.helmholtz-berlin.de
voip.helmholtz-berlin.de
icat.helmholtz-berlin.de
pyweb1.basisit.de
sbc-user-01-int.voip.helmholtz-berlin.de
voip.helmholtz-berlin.de
ncoffice.basisit.de
autodiscover.helmholtz-berlin.de
divwiki.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
nc.basisit.de
ebissprod.helmholtz-berlin.de
gw-ibz-h2.helmholtz-berlin.de
jitsi1.basisit.de
ise-psn-a-1.helmholtz-berlin.de
dits.helmholtz-berlin.de
sip.helmholtz-berlin.de
indico.helmholtz-berlin.de
evetest.helmholtz-berlin.de
sharetex.helmholtz-berlin.de
divwiki.basisit.de
g-intern.helmholtz-berlin.de
nubes.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
nubes.helmholtz-berlin.de
lyncpool.basisit.de
ise-psn-w-2.helmholtz-berlin.de
radius.hmi.de
voip.helmholtz-berlin.de
ise-psn-w-1.helmholtz-berlin.de
dits1.helmholtz-berlin.de
divlog.helmholtz-berlin.de
nubes-test.helmholtz-berlin.de

Certificate

The complete raw certificate details for sip.helmholtz-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 213490800295822994371114273055154735159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Zentrum Berlin für Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sip.helmholtz-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849927553171366162035039275090716506797916963316010207322890649266354716026825226742681395276057632330451915866629242223046204850243814840904363360475811954679270026051016578826380100434716710796731973847387657072043723740760317143898488472324752768146965099486477293606963000025059017296276482215068471221043676104379675087751972866662749564919868574545841102425356070332199050089757542128752793978403921837563414468463107779125133664386718740001503946299440967578806236786052441802704514899661109716806219093637130131078327509434114051923368939415966469679699550033594921752801672435793231684608139720312722571298899684502986887830061220205031240364902907669066241821230149875844110268367148072610599351449439836663015978528419281032523748586324148931255676676780906761979141931064466329000443299968298306310242498893155516082902515459347295728089047575541963391298435297700020648563649671239614484463076345180814448831013076310180954693017977947756807416381836900060038082558029923028032361804352380591227289031701525460536212061199518180410829438273055554761047164695277367872723903839587017240600471130135118564836372618917054587044182875863299749860184365550591657638323779804298857089659545642119550304144036221843299785171239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7fe5a585532030067aaa5cde4ead00cc4c8a27d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncweb.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.helmholtz-berlin.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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