www.giosue.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:05:63:8b:f9:31:5a:91:bc:20:a1:86:e6:40:14:81:23:aa was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.giosue.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:05:63:8b:f9:31:5a:91:bc:20:a1:86:e6:40:14:81:23:aaSerial Number (int): 263170589984961676375645901298381017392042
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3b:05:37:d5:e9:a3:30:ef:bb:b4:94:34:68:53:cb:a1:81:23:f2:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9b:69:a4:16:4c:0b:d2:77:b5:d2:58:01:c3:fa:cf:2e:15:74:a0:93
Fingerprint (sha256): c0:a3:9f:2f:f4:1b:97:fd:4d:f8:85:ac:1b:5a:ee:82:b5:4b:10:fd:2e:15:35:51:2e:75:22:c3:da:28:c2:2f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.giosue.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.giosue.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.giosue.co
Other certificates including the domain name giosue.co
(limited to 100 certificates)
43092.com
giosue.co
www.pierluigi.co
forexdaily.co
1paw.co
www.giosue.co
www.lipari.co
woodenmobiles.com
giosue.co
www.w2.studio
cantonesegirl.com
www.olimpiyat.co
www.julies.co
www.giosue.co
www.noak.co
www.kevo.co
www.virals.in
www.professionalhireservices.in
www.lgbtqiamatch.co.in
toptanci.co
www.giosue.co
giosue.co
www.pierluigi.co
forexdaily.co
1paw.co
www.giosue.co
www.lipari.co
woodenmobiles.com
giosue.co
www.w2.studio
cantonesegirl.com
www.olimpiyat.co
www.julies.co
www.giosue.co
www.noak.co
www.kevo.co
www.virals.in
www.professionalhireservices.in
www.lgbtqiamatch.co.in
toptanci.co
www.giosue.co
Certificate
The complete raw certificate details for www.giosue.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISAwVji/kxWpG8IKGG5kAUgSOqMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgyMzI2MzhaFw0x OTEwMjYyMzI2MzhaMBgxFjAUBgNVBAMTDXd3dy5naW9zdWUuY28wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDF9eonpHDmDZqsgreNChIzsz7YOy98FON4 K20uuImYaILglUrHNb57dSJvNScDBfrTQpmrKo+QCZxmSQ6DHO6NJrYUzlq4Vt0b uq5h5otTB0/77plyTfjYUyHACGjISjKPS1Izuv+hYbS8adrPQgdyI3k70h4TB4ze mDphqpvFthEh6TKKqTTFNIDI/Aa3Ouax2v0CHWb6T073zeL0NRA783nK1P+mCMSp zvS11UYjFCVuGRt3icorypv4emvF694kej8VRIACAdcJhAenI84L72qU4S6sq6EQ j6yVBRyD0IenmIPGav/uNuZ/FHQH7a4Vj1TtEJ+3auLmQqz2iYUTPYYzfNoz5IrK 8PcdRooBfPpxxaJQwYzS1sHz/0U3OBxgmJ212NYc41NmKuUxWPa/ZLebNTJae73z Jgoluvp68BTG1zKC0eAxVo48u6fzvzesrBvX6rSqqZs1LQYLNReQ1HckTtZ4D2vo QJXp1wMC1fLAYJsHcTgojb09Zh+eGXhfcf8ST5cHhXo7+3Z93d8nCUSJPbJoCuDq T28Xn2ZJ48K91QXqFBjumos8ijVbkNxwRZAsCETNSS4dhGFc8LUh3qalJFJmUOwJ 3wfI2s3gNYYIWVbRxtxCOPABzvOC28NDNybqyZhDLjy3Q343VzBgAqga+M8QDj5Q DWQZ2HPTTQIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ7BTfV 6aMw77u0lDRoU8uhgSPyEzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5naW9zdWUuY28wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz APEAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWw7HzsTAAAE AwBHMEUCIA7ftl1eeDMLAwt3ccFpqGZCib+0cXsx5pkloMMTsvGYAiEArc6mf2rI /JVCRVqSxaLBuTRWC7HFmK2mK5g0LwK6cAoAdwBj8tvN6DvMLM8LcoQnV2szpI1h d4+9daY4scdoVEvYjQAAAWw7Hz2DAAAEAwBIMEYCIQCld72domZld71EO9mF6N7F 0aHprryPJP4gIDp3mBUWFQIhALy0Yn/tKf+smgtoWQ3qciyM8uH+lNEkriVZ7x3R w9BfMA0GCSqGSIb3DQEBCwUAA4IBAQAmDuoQCQdqoj+IKpgGAcZeq43QwA2kYtit kVT175apJx4qpO2m0Kh2R03fUD7DvaAttBAghiaP9Pcd4i3F2nkEh/OtEhx9S5Jk DUFxKv5882upEU5WCKtHpaMPJJvL8jWAvR12V87PyGvKlK9hGKAmp7rI9O3qarpN VnrmwP3Uikb/4zsoc7TrwYoyqeK0Hcv39LwLe+RDLW7uLlwaRc2hRu8xHFhKhVXU jmwHOTnrWJT2lpIY9nSOsIM8nS7G7ivZB01/L+4ly7Q6KKIdAfJnC52+FgyZU9uw FQiIJUpHWsdiTfmDvPTp1LvpIFOsGeY38vZyv7RLeA5ywcodw7Pi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxfXqJ6Rw5g2arIK3jQoS M7M+2DsvfBTjeCttLriJmGiC4JVKxzW+e3UibzUnAwX600KZqyqPkAmcZkkOgxzu jSa2FM5auFbdG7quYeaLUwdP++6Zck342FMhwAhoyEoyj0tSM7r/oWG0vGnaz0IH ciN5O9IeEweM3pg6YaqbxbYRIekyiqk0xTSAyPwGtzrmsdr9Ah1m+k9O983i9DUQ O/N5ytT/pgjEqc70tdVGIxQlbhkbd4nKK8qb+HprxeveJHo/FUSAAgHXCYQHpyPO C+9qlOEurKuhEI+slQUcg9CHp5iDxmr/7jbmfxR0B+2uFY9U7RCft2ri5kKs9omF Ez2GM3zaM+SKyvD3HUaKAXz6ccWiUMGM0tbB8/9FNzgcYJidtdjWHONTZirlMVj2 v2S3mzUyWnu98yYKJbr6evAUxtcygtHgMVaOPLun8783rKwb1+q0qqmbNS0GCzUX kNR3JE7WeA9r6ECV6dcDAtXywGCbB3E4KI29PWYfnhl4X3H/Ek+XB4V6O/t2fd3f JwlEiT2yaArg6k9vF59mSePCvdUF6hQY7pqLPIo1W5DccEWQLAhEzUkuHYRhXPC1 Id6mpSRSZlDsCd8HyNrN4DWGCFlW0cbcQjjwAc7zgtvDQzcm6smYQy48t0N+N1cw YAKoGvjPEA4+UA1kGdhz000CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263170589984961676375645901298381017392042 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:26:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:26:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.giosue.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807608804501816491690292423289380257429266368867281373940645405752590436155554331580171467714614641933044700039628066199468724265917133297666019839901213285067834072028211898455836137370408916186431896453881177671281925364951936287288781834099564010148445764089099589791046622838670971822444134444707741718461416150991927286197407986819993097904166744695190911110903951050992073175175518850460564503603642184288119641398353343177487599101377957505163667575458073153200965850167808381441535969905814474585686603416283387021378178043977180867451389144540208502271660734536034513548877478901735742200144285188629684560516964274253123832273085491511849802950319985455586546204277600707471419876017284433411453405721425615834159633005884527576740374711431812697923614553467554240346236653897074669598399683614604760567635734608251363370992763069616159932517092946281669075762691363922812494432930172815462367989780989632158477473329587403775388603007726758283184803695155899139236628726481646794977847163697448912412826070475041798032953920696971804339323790533453608787564247099540678252690413220687004032148079765494899430133380291569855027177405399665035893873639236128760571836989424744274630861526113805623314110068556292712893240141 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3b0537d5e9a330efbbb494346853cba18123f213 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giosue.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b1f3b13000004030047304502200edfb65d5e78330b030b7771c169a8664289bfb4717b31e69925a0c313b2f198022100adcea67f6ac8fc9542455a92c5a2c1b934560bb1c598ada62b98342f02ba700a00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3b1f3d830000040300483046022100a577bd9da2666577bd443bd985e8dec5d1a1e9aebc8f24fe20203a7798151615022100bcb4627fed29ffac9a0b68590dea722c8cf2e1fe94d124ae2559ef1dd1c3d05f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00260eea1009076aa23f882a980601c65eab8dd0c00da462d8ad9154f5ef96a9271e2aa4eda6d0a876474ddf503ec3bda02db4102086268ff4f71de22dc5da790487f3ad121c7d4b92640d41712afe7cf36ba9114e5608ab47a5a30f249bcbf23580bd1d7657cecfc86bca94af6118a026a7bac8f4edea6aba4d567ae6c0fdd48a46ffe33b2873b4ebc18a32a9e2b41dcbf7f4bc0b7be4432d6eee2e5c1a45cda146ef311c584a8555d48e6c073939eb5894f6969218f6748eb0833c9d2ec6ee2bd9074d7f2fee25cbb43a28a21d01f2670b9dbe160c9953dbb0150888254a475ac7624df983bcf4e9d4bbe92053ac19e637f2f672bfb44b780e72c1ca1dc3b3e2