fniq.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:74:b5:0f:a4:e3:ec:bb:77:64:2f:e5:8d:a4:b2:1d:75 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fniq.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:74:b5:0f:a4:e3:ec:bb:77:64:2f:e5:8d:a4:b2:1d:75
Serial Number (int): 293478530856391502546608713435167346269557
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:8c:1e:14:c2:30:79:1c:c9:ff:53:dd:0d:96:47:7d:99:8f:61:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:c3:c3:f4:29:9f:5e:bf:dd:74:2c:fa:11:e4:79:41:4b:7e:f6:ac
Fingerprint (sha256): e4:13:35:40:a2:1e:01:e2:c3:0d:96:49:7e:3d:c9:6d:a3:88:8e:b2:22:42:27:79:8f:d7:72:4a:14:34:ec:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fniq.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fniq.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fniq.com
www.fniq.com

Other certificates including the domain name fniq.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for fniq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISA150tQ+k4+y7d2Qv5Y2ksh11MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjgyMTEzMzNaFw0y
MDAzMjcyMTEzMzNaMBMxETAPBgNVBAMTCGZuaXEuY29tMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA7mzR2uqt4eeL4lFfKvsAMJv1NvRkbP9PNULEw//z
wAWFn2iGZYTn75zC8k9JGhkcaG98/2qDt8lFcGDycmX1rzpreq7e75HMfGi8CvbC
VeL1qqwy0ayNBAVCyme1f6sszDVjo8ASdXYgA4A6QsGe1XyjBWHc/MvnMLbBbUhK
RYt08VvQudX+UkOD27sdTp548Cogv4l4MYuNA/QhGFlDy/YqBkwME4Lz5hk5UV8g
uKUKlOurF+18+WjVjol77WOpV9KztksgFZV2IedjxRHqSwe1X4ntmHwixhXTuk/O
RbxntdKRB2OGDi9sRkqBfEnN5wKdaOGoYXsWHtri71rbSbs9b2s+SpXsr705+A/p
uCmtv91tP0AZiTSf3IxXRPuy6IZVX2uZPmZNNtxi5F4BxZbI/e458iekAHYnWuVR
MF/f8Je8DLdCCVI3NZSvWvpp4IokpjrFI66syOIQQznxzA6Tp5O0kENOW9C8Ln5S
9qpMABEdvt12z4+VFyZ/Id0t7UiuMT4Kopm8THenkaocBcO15KRf7gkD60lo7aP0
wLIAPdShtrpwGuc/zyDtOl4tmnittKRLnWlBG68GhiWLY4K89Qt55yOmx+XKDZjS
LTBPQvu/jAhSY+eVxukKN03xfh6dDAChY3i7yAIl91j6+wclp2/hIU2XIi77jMcv
RLcCAwEAAaOCAmwwggJoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUT4weFMIweRzJ
/1PdDZZHfZmPYcwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAhBgNVHREEGjAYgghmbmlxLmNvbYIMd3d3LmZuaXEuY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFvTpJh
qwAABAMASDBGAiEA0o+CWfgc6LxogZfeRq6qzrbTIZ9ukq4e3fsrkf/4iOUCIQCJ
75RtHodFfJ2aIaFEv5Hffdv7VUGAKZp6WDGV0UZfnwB2AAe3XBvlfWj/8bDGHSMV
x7rmV3xXlLdq7rxhOhpp06IcAAABb06SYdIAAAQDAEcwRQIhAJw4KdapcSqwo5lc
CtpIDzSMlxHRNvC2mLeiPsy4Y6KZAiAHSrBFvqVzasEhlxprXw3/lB1cSLV/zuI3
ItKSl37I5jANBgkqhkiG9w0BAQsFAAOCAQEAVC+rg2ht77UUTpTZtwbCym8hlwnA
Lcbv9KyU/4Ax2RH2Oo1YSr/bLAH0YsH3Wy2/91LKfRyvs2C3/QaZ5XIVjF8Ubr91
wYJFCbVJ1LHoBv72Ahv58aemQP6h0XFfOSvFgR0zuvHVNgfekd52vuyCQ2k9k6+B
GnF+5KKlkXdsixPynVeDS2XjCenTW7v3RIOLaqk+JSLlDio6oUVyXgcpk92JFqax
H8Fc9KQZ4ojmlwb7MsKZaJs2gqowd1TY1fc0kGUE8G0OgFvp1RjqgbtDx55WTXk/
oC++1tThWhwIMcKegXK5aKOzF1w6djnx/oSZ7aPscTbc8PpTA0ExvM4HxA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7mzR2uqt4eeL4lFfKvsA
MJv1NvRkbP9PNULEw//zwAWFn2iGZYTn75zC8k9JGhkcaG98/2qDt8lFcGDycmX1
rzpreq7e75HMfGi8CvbCVeL1qqwy0ayNBAVCyme1f6sszDVjo8ASdXYgA4A6QsGe
1XyjBWHc/MvnMLbBbUhKRYt08VvQudX+UkOD27sdTp548Cogv4l4MYuNA/QhGFlD
y/YqBkwME4Lz5hk5UV8guKUKlOurF+18+WjVjol77WOpV9KztksgFZV2IedjxRHq
Swe1X4ntmHwixhXTuk/ORbxntdKRB2OGDi9sRkqBfEnN5wKdaOGoYXsWHtri71rb
Sbs9b2s+SpXsr705+A/puCmtv91tP0AZiTSf3IxXRPuy6IZVX2uZPmZNNtxi5F4B
xZbI/e458iekAHYnWuVRMF/f8Je8DLdCCVI3NZSvWvpp4IokpjrFI66syOIQQznx
zA6Tp5O0kENOW9C8Ln5S9qpMABEdvt12z4+VFyZ/Id0t7UiuMT4Kopm8THenkaoc
BcO15KRf7gkD60lo7aP0wLIAPdShtrpwGuc/zyDtOl4tmnittKRLnWlBG68GhiWL
Y4K89Qt55yOmx+XKDZjSLTBPQvu/jAhSY+eVxukKN03xfh6dDAChY3i7yAIl91j6
+wclp2/hIU2XIi77jMcvRLcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293478530856391502546608713435167346269557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 21:13:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 21:13:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fniq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 972689451602541759461643344034060720342112586152997362940060109727149720902598687414506576611641712995491698455333643861684817161454678775722424962742926146145953934261944060165146577860917647880679444039104577072526774809167171004828994861469428904659081101871768107193107387075495090050942999474708298196697091656312895200674301424080049406399544694386693516324814071149086028393824771061294620195352031058528180181572087161311602877174554809535072571543202140722178968090627624805878221711102414773532846992966482173972491812866251193251418362113230113008610073329229738115602158663055147683128165312671693480055996643243733905103795681589023510793519474845161220390521820383354487740864791964183454379785760690314753332857514051809309395643991953832085696852061533788117599633717744775590666129634944608739922428815499326257912706487998213586276990833819733322908996034540852557713578956446048619583070748552467805045545122885579605941430853984644056710314597536879675119613158451754764018820896893850612612793476188857796587203489597006674682967306467255217874655051684311105215135175196211907150521191935298462335339970188850560415037299177678939827491933178146275084099489276426021748299245398360294738654681127315076400759991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f8c1e14c230791cc9ff53dd0d96477d998f61cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fniq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fniq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f4e9261ab0000040300483046022100d28f8259f81ce8bc688197de46aeaaceb6d3219f6e92ae1eddfb2b91fff888e502210089ef946d1e87457c9d9a21a144bf91df7ddbfb554180299a7a583195d1465f9f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f4e9261d200000403004730450221009c3829d6a9712ab0a3995c0ada480f348c9711d136f0b698b7a23eccb863a2990220074ab045bea5736ac121971a6b5f0dff941d5c48b57fcee23722d292977ec8e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00542fab83686defb5144e94d9b706c2ca6f219709c02dc6eff4ac94ff8031d911f63a8d584abfdb2c01f462c1f75b2dbff752ca7d1cafb360b7fd0699e572158c5f146ebf75c1824509b549d4b1e806fef6021bf9f1a7a640fea1d1715f392bc5811d33baf1d53607de91de76beec8243693d93af811a717ee4a2a591776c8b13f29d57834b65e309e9d35bbbf744838b6aa93e2522e50e2a3aa145725e072993dd8916a6b11fc15cf4a419e288e69706fb32c299689b3682aa307754d8d5f734906504f06d0e805be9d518ea81bb43c79e564d793fa02fbed6d4e15a1c0831c29e8172b968a3b3175c3a7639f1fe8499eda3ec7136dcf0fa53034131bcce07c4