blincoe.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:37:62:56:d9:f2:c4:51:2a:1f:cc:c4:83:58:1b:b5:d3:3a was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=blincoe.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:37:62:56:d9:f2:c4:51:2a:1f:cc:c4:83:58:1b:b5:d3:3aSerial Number (int): 280183103277565967685784749153065110983482
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2d:97:9f:17:11:8e:24:e3:56:f1:6d:20:45:82:3a:7a:b7:36:5c:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 26:ec:31:77:e3:09:34:5d:9a:2c:e3:1c:84:ef:53:7a:36:e1:02:15
Fingerprint (sha256): aa:cb:fa:f2:fa:9e:ee:87:98:a4:2a:3a:4a:74:6f:da:54:1a:0c:f4:da:4d:26:d8:71:cd:84:04:ad:d0:8b:9c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate blincoe.org
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blincoe.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blincoe.org
blogdoggy.org
bonafideblerd.com
indocin.org
paytime.org
whitesville.com
www.blincoe.org
www.blogdoggy.org
www.bonafideblerd.com
www.indocin.org
www.paytime.org
www.whitesville.com
www.xosoa.com
xosoa.com
blogdoggy.org
bonafideblerd.com
indocin.org
paytime.org
whitesville.com
www.blincoe.org
www.blogdoggy.org
www.bonafideblerd.com
www.indocin.org
www.paytime.org
www.whitesville.com
www.xosoa.com
xosoa.com
Other certificates including the domain name blincoe.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for blincoe.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgISAzdiVtnyxFEqH8zEg1gbtdM6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTMxNDQyMTVaFw0x OTExMTExNDQyMTVaMBYxFDASBgNVBAMTC2JsaW5jb2Uub3JnMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGe4kwpoKcdtQo7Nn8Nr+41mfl3T8O0KGk79 XTr38m7RqMPPV9Zvf0NECPAukwAl7monnvOssQdTeGdNhVkrQpHYw164t971H49r zCcbfdEltOfUnCj4h56NwESWplF2wnVTvW8aGPcmCz2wPE5M866FgeHRXUNKMZh6 7ZOAPqjSXCdLTYit3npkMPw7xpky6zmLDN1a5vD0ETM1hU0a2JLr8cOsI0jyj0uj Gy2fVx5cgkrpKIAQv7fJqBCamP3FUAJIlIzBtxxbmTDd7MS4zGXRoN9rzfk0NmAq TcbVvvnixkAylvVOqYZLrcD2F1OXf1/lQlG5TgjkX/RSREpqiQIDAQABo4IDPDCC AzgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQtl58XEY4k41bxbSBFgjp6tzZcVzAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MIHxBgNVHREEgekwgeaCC2JsaW5jb2Uub3Jngg1ibG9nZG9nZ3kub3JnghFib25h ZmlkZWJsZXJkLmNvbYILaW5kb2Npbi5vcmeCC3BheXRpbWUub3Jngg93aGl0ZXN2 aWxsZS5jb22CD3d3dy5ibGluY29lLm9yZ4IRd3d3LmJsb2dkb2dneS5vcmeCFXd3 dy5ib25hZmlkZWJsZXJkLmNvbYIPd3d3LmluZG9jaW4ub3Jngg93d3cucGF5dGlt ZS5vcmeCE3d3dy53aGl0ZXN2aWxsZS5jb22CDXd3dy54b3NvYS5jb22CCXhvc29h LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB bIuk5I0AAAQDAEYwRAIgP+bkDBQ7VsxvE5q+ugryt4CLn/xX7QL0HRsngEW4R1IC ICjK0L2MWNcZGY3Ov0G12+hUEw8JTjOcytXiaRUJPluDAHcAY/Lbzeg7zCzPC3KE J1drM6SNYXePvXWmOLHHaFRL2I0AAAFsi6TkfAAABAMASDBGAiEAz7id7w3rOJJx RiNeHP62m44dPAlS3+tHQGMdnghSzzICIQDyzVSOyZOewG6IQlrf8YkVoZ02Usuw YoxbukCQRDOnrzANBgkqhkiG9w0BAQsFAAOCAQEADoG3QgIC3kDG5fJ/p/z7HU1A YJcf6Bj8a7K0qCBOcR7uDPO63luGZVqfBCYOtwuAm/NqvO9Wg7KBhyqzfye90UUk dTOfSaEaYrDDdGXt+Ofr3pTY8ZRrQfyqFu2f/OA2MWzHywiJgIYxxdRdwcqXs3zU dyA1yXGCM38OHUVhPRZZwN9I3GNFxrIzyu7j39Evvh0Bv9VAJgPg4ypFcadcQmf3 22mWvI1NRW1GrFDJxtnJPZLWZDI7BAjYHIWZ9FQPPSblHGdiUqjIxG0+eBlSbqmc p2bWkij0r3I8goTa5wzeh2nwA/ULqB152dQXj0duYoOPvxYNtiTFHI92UqopaA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGe4kwpoKcdtQo7Nn8Nr +41mfl3T8O0KGk79XTr38m7RqMPPV9Zvf0NECPAukwAl7monnvOssQdTeGdNhVkr QpHYw164t971H49rzCcbfdEltOfUnCj4h56NwESWplF2wnVTvW8aGPcmCz2wPE5M 866FgeHRXUNKMZh67ZOAPqjSXCdLTYit3npkMPw7xpky6zmLDN1a5vD0ETM1hU0a 2JLr8cOsI0jyj0ujGy2fVx5cgkrpKIAQv7fJqBCamP3FUAJIlIzBtxxbmTDd7MS4 zGXRoN9rzfk0NmAqTcbVvvnixkAylvVOqYZLrcD2F1OXf1/lQlG5TgjkX/RSREpq iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 280183103277565967685784749153065110983482 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 14:42:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 14:42:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blincoe.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21764135182401625715147444285708024439659969426724416505733848448289471396745581090939066034686647104261350276547521981503623161780381263628741423950703165772252527444661415539504051932583030474579865479974386690977656331378081560302374709528854424025475874155161543849348175072493378043724623567878844347784349256763698300941292530295511673588403701478612404159052301018178408986072106528947983628481933135427171880035502097665149101798218747460910414118181448174156166275213042951812479173668507144156454610335148163041447029203851830969185895465498468832863337790889901946787841442002124148873092046710500821199497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2d979f17118e24e356f16d2045823a7ab7365c57 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (233 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blincoe.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogdoggy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonafideblerd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indocin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paytime.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitesville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blincoe.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogdoggy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonafideblerd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indocin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paytime.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitesville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xosoa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xosoa.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c8ba4e48d000004030046304402203fe6e40c143b56cc6f139abeba0af2b7808b9ffc57ed02f41d1b278045b84752022028cad0bd8c58d719198dcebf41b5dbe854130f094e339ccad5e26915093e5b8300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c8ba4e47c0000040300483046022100cfb89def0deb38927146235e1cfeb69b8e1d3c0952dfeb4740631d9e0852cf32022100f2cd548ec9939ec06e88425adff18915a19d3652cbb0628c5bba40904433a7af . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000e81b7420202de40c6e5f27fa7fcfb1d4d4060971fe818fc6bb2b4a8204e711eee0cf3bade5b86655a9f04260eb70b809bf36abcef5683b281872ab37f27bdd1452475339f49a11a62b0c37465edf8e7ebde94d8f1946b41fcaa16ed9ffce036316cc7cb0889808631c5d45dc1ca97b37cd4772035c97182337f0e1d45613d1659c0df48dc6345c6b233caeee3dfd12fbe1d01bfd5402603e0e32a4571a75c4267f7db6996bc8d4d456d46ac50c9c6d9c93d92d664323b0408d81c8599f4540f3d26e51c676252a8c8c46d3e7819526ea99ca766d69228f4af723c8284dae70cde8769f003f50ba81d79d9d4178f476e62838fbf160db624c51c8f7652aa2968