SSL certificate
TLSv1.3desy.de · 131.169.5.106:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=DE ST=Hamburg O=Deutsches Elektronen-Synchrotron DESY CN=www.desy.de
- Issuer
- C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
- Valid from
- 2025-11-08T06:15:12+00:00
- Expires
- 2026-11-08T06:15:12+00:00
- Days remaining
- 39
- Serial (hex)
- 18251D5288A6D7E48DABC983044603F4
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
DNS:www.desy.de, DNS:desy.de
SHA-256 fingerprint
82:99:FC:66:37:62:4A:A4:8D:97:35:C5:60:AA:CD:15:0F:C4:0B:D4:B3:D2:2F:54:1A:42:6D:2E:86:8B:5E:15
Certificate extensions & PEM
- authorityKeyIdentifier
- 86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
- authorityInfoAccess
- CA Issuers - URI:http://crt.harica.gr/HARICA-GEANT-TLS-R1.cer OCSP - URI:http://ocsp-tls.harica.gr
- subjectAltName
- DNS:www.desy.de, DNS:desy.de
- certificatePolicies
- Policy: 2.23.140.1.2.2 Policy: 0.4.0.2042.1.7 Policy: 1.3.6.1.4.1.26513.1.1.1.2
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl
- subjectKeyIdentifier
- 32:5F:63:3D:53:11:AD:B7:4D:66:53:EA:7A:E6:E9:7E:AA:BF:AA:C4
- keyUsage
- Digital Signature, Key Encipherment
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Nov 8 06:25:14.360 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:21:84:56:FD:CF:FB:A7:F7:BB:BA:EA:36: F8:25:17:D4:FF:98:2D:4B:E5:CB:51:D5:86:47:FC:DC: 9A:71:94:B4:02:20:08:4C:5A:D4:39:A0:92:C1:5E:17: AC:B0:C8:4A:E1:97:C8:A9:D0:9E:C5:19:97:06:51:CC: 02:C5:F5:3C:D5:2F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 8 06:25:14.311 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:C9:72:84:01:1C:DB:27:88:97:87:E4: FE:02:01:61:56:6C:D6:5C:07:BA:7A:25:81:4D:70:C1: C0:4F:7D:A2:77:02:21:00:AF:A3:7C:A8:18:6A:54:8D: EA:3E:53:38:48:F6:04:0A:F2:CE:8A:71:DF:EF:6F:4F: BE:8F:06:F3:5C:B4:0F:D7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Nov 8 06:25:14.360 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:82:25:CB:5E:0D:31:1B:00:70:68:72: 5C:EA:D4:B0:61:4E:1A:BE:C5:BA:4C:19:11:D3:BC:ED: 2E:D4:3F:49:D9:02:21:00:B0:AB:19:A7:A2:CF:21:9F: 98:D6:E5:2C:99:62:05:8D:C4:15:8D:7C:40:95:45:42: 17:C5:5F:85:6D:B8:DE:B7
-----BEGIN CERTIFICATE----- MIIHxzCCBi+gAwIBAgIQGCUdUoim1+SNq8mDBEYD9DANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEYMBYGA1UEAwwPR0VBTlQgVExTIFJTQSAx MB4XDTI1MTEwODA2MTUxMloXDTI2MTEwODA2MTUxMlowZTELMAkGA1UEBhMCREUx EDAOBgNVBAgMB0hhbWJ1cmcxLjAsBgNVBAoMJURldXRzY2hlcyBFbGVrdHJvbmVu LVN5bmNocm90cm9uIERFU1kxFDASBgNVBAMMC3d3dy5kZXN5LmRlMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsW9vfWkWvQg33nFSCpnZXjEkNkqHg9A4 9WpQj4dlD7JUfw4Wkv7QTnTDsIl3WEFGFFIIavY5/HYac6j6jkHOBk1ZOhZbF49d qTHVZpsqK5MnLnl057Q/x5e4kMbidULQPxbfqFtFpYi9I1feVg+q8OvlSeicqsy6 /6c4yk5zxdRiHg8G+6yC5+WWzLAZPu3sGIvB00TRqEnrIDXgcSi8FmtjRYR0zOEG 4ZYre3dbu/j/VTns7t06g/6vmM6KhrkSNLRQ1U4jxKmvI1kig2EVW6dp6xV85y6l 86kgNL3Tc7OIaJYSDntdy4uyGsP7SnBCYWdJlhmWAZpRYwoYQNBTMmLqtIFD5OBv yaqiXe/0jNDOcOEERckKXzHz15SbZgInwR3X0HbnsPwlFW0FuQu4r29jYdESi1FY gPNdl0B6amYTT/IbKtMVRcy/Q5rNiuNf2eQ2hed3BiMl+v1rJX6nR2QciknxvXa/ pEHEDYr4J+Ifj/MdH33BNlGwiqJ9U4byQ0J+8wui6f/RTu5MIIUU67M6SQoJjzcQ m1b6XySoTvT/lwCA+YbzIYDjakqxffNs+ctjiPt7833jFNIAAIsg4AJ9GoDoGs4+ juiqDIzzacEvzY9xhCrYJoCbP2Bq4LSogklSZ4Ik8CkVxum5GXRVnLr28tOG4oN4 jz3+59Gtp1sCAwEAAaOCAvYwggLyMB8GA1UdIwQYMBaAFIYBcj+MqXDiMQZTFs4B X1t5yDw7MG8GCCsGAQUFBwEBBGMwYTA4BggrBgEFBQcwAoYsaHR0cDovL2NydC5o YXJpY2EuZ3IvSEFSSUNBLUdFQU5ULVRMUy1SMS5jZXIwJQYIKwYBBQUHMAGGGWh0 dHA6Ly9vY3NwLXRscy5oYXJpY2EuZ3IwHwYDVR0RBBgwFoILd3d3LmRlc3kuZGWC B2Rlc3kuZGUwLQYDVR0gBCYwJDAIBgZngQwBAgIwCAYGBACPegEHMA4GDCsGAQQB gc8RAQEBAjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwPQYDVR0fBDYw NDAyoDCgLoYsaHR0cDovL2NybC5oYXJpY2EuZ3IvSEFSSUNBLUdFQU5ULVRMUy1S MS5jcmwwHQYDVR0OBBYEFDJfYz1TEa23TWZT6nrm6X6qv6rEMA4GA1UdDwEB/wQE AwIFoDCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHUAlE5Dh/rswe+B8xkkJqgY ZQHH0184AgE/cmd9VTcuGdgAAAGaYiPyeAAABAMARjBEAiAhhFb9z/un97u66jb4 JRfU/5gtS+XLUdWGR/zcmnGUtAIgCExa1DmgksFeF6ywyErhl8ip0J7FGZcGUcwC xfU81S8AdwDYCVU7lE96/8gWGW+UT4WrsPj8XodVJg8V0S5yu0VLFAAAAZpiI/JH AAAEAwBIMEYCIQDJcoQBHNsniJeH5P4CAWFWbNZcB7p6JYFNcMHAT32idwIhAK+j fKgYalSN6j5TOEj2BAryzopx3+9vT76PBvNctA/XAHcArKswcGzr7IQx9BPS9JFf ER5CJEOx8qaMTzwrO6ceAsMAAAGaYiPyeAAABAMASDBGAiEAgiXLXg0xGwBwaHJc 6tSwYU4avsW6TBkR07ztLtQ/SdkCIQCwqxmnos8hn5jW5SyZYgWNxBWNfECVRUIX xV+FbbjetzANBgkqhkiG9w0BAQsFAAOCAYEAmHZtc7x8xsZB623nM8IPRgWqvRnM hJRMIKRPJBn1oTKkk10q4Ka/gaw6A2RAVuVA2j3ySfzKpwjWtTsIk1hOXM4k2jau ujONQoOu/UjmsAg200Lc29iUcLG/9XLq1zEVPswxTyL3vU3YxlcWq6DoCgawCoir fq9uYEsycp6zUofpm6xtQYRXeQHfu7ml0k/NxQyP8WgM2kR8AWh5iQYlGiu8poDf 6Tzjy1l9ASINpt7ozYCmiF15LmsXWdBJdL1zE/DJkRkDQ0DfAek05nZ3Q/062KXp why6RrIHMG27/vsnf31EjRQW2GyaCDcNnA/sabqKtC0ntQ7rYSH+cz9JyaTL2TcJ DuumpRpMYFYzjzXp/c7epFyhSB9JImWkbJ2DeJ9UCxFk8DNLB7NV5jn/UPIqAneX 8jRUSnCU2zUGHZIh2bma61mwi2+Vmo2fu3xbTDkIMiy4Dr/FzCYqK1+LGnqPNn67 rcOx8uwKRWEZzTRJ0Hi4zeYsCsNndRgvRHpP -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-29T20:46:17+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=GR O=Hellenic Academic and Research Institutions CA CN=GEANT TLS RSA 1
- Issuer
- C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
- Valid from
- 2025-01-03T11:15:00+00:00
- Expires
- 2039-12-31T11:14:59+00:00
- Days remaining
- 4840
- Serial (hex)
- 14D57BF3692228219A5567FA91651B22
- Signature
- RSA-SHA256
- Public key
- RSA 3072
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
5B:67:8D:C4:40:95:A5:28:95:B6:3B:31:F2:72:27:F4:B3:6C:3E:34:74:91:BF:2B:FA:69:18:37:A5:FB:8C:79
Certificate extensions & PEM
- basicConstraints
- CA:TRUE, pathlen:0
- authorityKeyIdentifier
- 0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
- authorityInfoAccess
- CA Issuers - URI:http://crt.harica.gr/HARICA-TLS-Root-2021-RSA.cer
- certificatePolicies
- Policy: X509v3 Any Policy
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.harica.gr/HARICA-TLS-Root-2021-RSA.crl
- subjectKeyIdentifier
- 86:01:72:3F:8C:A9:70:E2:31:06:53:16:CE:01:5F:5B:79:C8:3C:3B
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE----- MIIGBTCCA+2gAwIBAgIQFNV782kiKCGaVWf6kWUbIjANBgkqhkiG9w0BAQsFADBs MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg Um9vdCBDQSAyMDIxMB4XDTI1MDEwMzExMTUwMFoXDTM5MTIzMTExMTQ1OVowYDEL MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl YXJjaCBJbnN0aXR1dGlvbnMgQ0ExGDAWBgNVBAMMD0dFQU5UIFRMUyBSU0EgMTCC AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKEEaZSzEzznAPk8IEa17GSG yJzPTj4cwRY7/vcq2BPT5+IRGxQtaCdgLXIEl2cdPdIkj2eyakFmgMjAtyeju8V8 dRayQCD/bWjJ7thDlowgLljQaXirxnYbT8bzRHAhCZqBakYgi5KWw9dANLyDHGpX UdY259ab0lWEaFE5Uu6IzQSMJOAy4l/Twym8GUiy0qMDEBFSlm31C9BXpdHKKAlh vIjMiKoDeTWl5vZaLB2MMRGY1yW2ftPgIP0/MkX1uFITlvHmmMTngxplH1nybEIJ FiwHg1KiLk1TprcZgeO2gxE5Lz3wTFWrsUlAzrh5xWmscWkjNi/4BpeuiT5+NExF czboLnXOfjuci/7bsnPi1/aZN/iKNbJRnngFoLaKVMmqCS7Xo34f+BITatryQZFE u2oDKExQGlxDBCfYMLgLucX/onpLzUSgeQITNLx6i5tGGbUYH+9Dy3GI66L/5tPj qzlOsydki8ZYGE5SBJeWCZ2IrhUe0WzZ2b6Zhk6JAQIDAQABo4IBLTCCASkwEgYD VR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQKSCOmYKSSCjPqk1vFV+olTb0S 7jBNBggrBgEFBQcBAQRBMD8wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jcnQuaGFyaWNh LmdyL0hBUklDQS1UTFMtUm9vdC0yMDIxLVJTQS5jZXIwEQYDVR0gBAowCDAGBgRV HSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBCBgNVHR8EOzA5MDeg NaAzhjFodHRwOi8vY3JsLmhhcmljYS5nci9IQVJJQ0EtVExTLVJvb3QtMjAyMS1S U0EuY3JsMB0GA1UdDgQWBBSGAXI/jKlw4jEGUxbOAV9becg8OzAOBgNVHQ8BAf8E BAMCAYYwDQYJKoZIhvcNAQELBQADggIBABkssjQzYrOo4GMsKegaChP16yNe6Sck cWBymM455R2rMeuQ3zlxUNOEt+KUfgueOA2urp4j6TlPbs/XxpwuN3I1f09Luk5b +ZgRXM7obE6ZLTerVQWKoTShyl34R2XlK8pEy7+67Ht4lcJzt+K6K5gEuoPSGQDP ef+fUfmXrFcgBMcMbtfDb9dubFKNZZxo5nAXiqhFMOIyByag3H+tOTuH8zuId9pH RDsUpAIHJ9/W2WBfLcKav7IKRlNBRD/sPBy903J9WHPKwl8kQSDA+aa7XCYk7bJt Eyf+7GM9F5cZ7+YyknXqnv/rtQEkTKZdQo5Us18VFe9qqj94tXbLdk7PejJYNB4O Zlli44Ld7rtqfFlUych7gIxFOmiyxMQQYrYmUi+74lEZvfoNhuref0CupuKpz6O3 dLv6kO9T10uNdDBoBQTkge3UzHafTIe3R2o3ujXKUGPwyc9m7/FETyKLUCwSU/5O AVOeBCU8QtkKKjM8AmbpKpe3pHWcyq3R7B3LmIALkMPTydyDfxen65IDqREbVq8N xjhkJThUz40JqOlN6uqKqeDISj/IoucYwsqW24AlO7ZzNmohQmMi8ep23H4hBSh0 GBTe2XvkuzaNf92syK8l2HzO+13GLCjzYLTPvXTO9UpK8DGyfGZOuamuwbAnbNpE 3RfjV9IaUQGJ -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=GR O=Hellenic Academic and Research Institutions CA CN=HARICA TLS RSA Root CA 2021
- Issuer
- C=GR L=Athens O=Hellenic Academic and Research Institutions Cert. Authority CN=Hellenic Academic and Research Institutions RootCA 2015
- Valid from
- 2021-09-02T07:41:55+00:00
- Expires
- 2029-08-31T07:41:54+00:00
- Days remaining
- 1066
- Serial (hex)
- 2A6086D4D4DE45C95E4B98FBBF2FBF26
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
4A:CD:8D:C6:02:0A:54:5A:85:89:43:A5:53:B5:E0:F3:FC:5B:85:9A:EA:17:46:65:0D:69:CF:12:10:F9:56:D8
Certificate extensions & PEM
- basicConstraints
- CA:TRUE
- authorityKeyIdentifier
- 71:15:67:C8:C8:C9:BD:75:5D:72:D0:38:18:6A:9D:F3:71:24:54:0B
- authorityInfoAccess
- CA Issuers - URI:http://repo.harica.gr/certs/HaricaRootCA2015.crt
- certificatePolicies
- Policy: X509v3 Any Policy
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.harica.gr/HaricaRootCA2015.crl
- subjectKeyIdentifier
- 0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE----- MIIGwDCCBKigAwIBAgIQKmCG1NTeRcleS5j7vy+/JjANBgkqhkiG9w0BAQsFADCB pjELMAkGA1UEBhMCR1IxDzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVu aWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRo b3JpdHkxQDA+BgNVBAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJ bnN0aXR1dGlvbnMgUm9vdENBIDIwMTUwHhcNMjEwOTAyMDc0MTU1WhcNMjkwODMx MDc0MTU0WjBsMQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVt aWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNB IFRMUyBSU0EgUm9vdCBDQSAyMDIxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAi8Lnr2WbBWeWyQ0kudAOZPzO4iQYLIR/d1HLBBE2uF7taXGnnuQlCZdn wUfCz5EWNmI9OAThUYL/rNK0ad0u7BGjRe5raztMv4yNpB6dEbnpOPl6DgyY4iMd 0U5j1Oe4QUT7a69r2h/TxZGIW6SJktGB5ow5WKDWaUOprZhSWG7bCvtrz2j646Re OkVzmAfqXwJy3gyls5+uqR23HbP8ilnnbnJlrfUwlCMH84IWSzWYnFO7L8rkWtnH jR38mJn7LKSCa/AqH44LX3FcXK5CeymJgcsDo5nKiJ4LQAlBM9vmWHr9rplwwFoP 1hOGcS92afyQ3dstbtHym/Uaa55vFYx68EsooCI4gCRsNqQ78jCR83gTz8E/Navx HREjtUMingGStxgC5RHRgtsVAMxhN8EqfJrh0LqzUEbugqydMfj7I+IDAEhwowkm eRVTYPM4XK046oEAYxS5M17dC9ugRQcaMwn4TbSnAqZp9MJZBYhlhVauS8vg3jx9 LRrI6fsfo2FK1ioTrXdMGhibkQ9Y2AZUxZf4qj8giqaFpnf2pvwc4u5ulDMqg1CE CuVPhvhQRXgAgetbaOMmjcx7XFH0FCxAvhpgHXpyYR0fYy2Iqs6iRZAI/Gu+s1Aq Wv2oSBhG1pBAkpAKhF5oMfjr7Q3THcZ9mRhVVidlLo1FxSTszuMCAwEAAaOCASEw ggEdMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUcRVnyMjJvXVdctA4GGqd 83EkVAswTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzAChjBodHRwOi8vcmVwby5o YXJpY2EuZ3IvY2VydHMvSGFyaWNhUm9vdENBMjAxNS5jcnQwEQYDVR0gBAowCDAG BgRVHSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNVHR8EMzAx MC+gLaArhilodHRwOi8vY3JsLmhhcmljYS5nci9IYXJpY2FSb290Q0EyMDE1LmNy bDAdBgNVHQ4EFgQUCkgjpmCkkgoz6pNbxVfqJU29Eu4wDgYDVR0PAQH/BAQDAgGG MA0GCSqGSIb3DQEBCwUAA4ICAQDAze/rVni3cYGP1BWkxXnIVynqHcC6Cw7kbkXo XBZAqF9ANQAKoz2YQ+WyzrparKVilMG6p6mdWTKeLy6eQDRhFSu9DrMYr4TBYxIp 2e5ZLQBk96xbG3wSepBCkTDA0MA0NybzM0gF5nTa82BMCED8EQXliWWsgqUorXuk 7msadosX793M42llmAcj1zJkADzlyzi4gcPvIc4skfmz1OW9jxxwyaR/41VYzPVy w7m0rsL9n3v5PCFJ1zrldYayKq9gOdwOZInNJQgPU6imXEFBZWdqdR+xdL7qHVMk dzBRoFqnYjr2bonw87Rxk7dAsdzmUUPJTIayzDTdtU78XkOl0FivJWBXDQPiVB2Z 5NdOVPUANDnADA5octuC3YTG2ncpG9aNKM4ggAyr3imdnz5UZdioYkecv2TVJHT2 lXE5PH/ifJs8p9+WFgyzFsW97BUF1nKsZiUWvlyPY9C9PKuhI4OMeTEA99YIRXYj XDSZq300ko5sXUVKVG2osAR4Sr3wqS5hLGNBfym7FZwsQ+/ja+fenEALAbAiEMpI 9h71lpMpIhdx7rdRznNeSOok/pVMaqvBZ0IvAq+yXb7d8C+tAND0IcUxYyyJqkE7 89RJdcGZO9JMXv4inBFIEuMAMlGPxzcroEx+ehDXyGR0asw7CooV2DCfiEJlIsKz LcPZew== -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.