pgp.governikus.de

- Governikus GmbH & Co. KG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 61:f6:f8:0d:cf:71:7e:4b:42:72:c4:bf:cb:e9:9d:9a was issued on by D-Trust GmbH.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Company registration number: CSM030716418
Organization: Governikus GmbH & Co. KG
State / Province: Bremen
Locality: Bremen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:f6:f8:0d:cf:71:7e:4b:42:72:c4:bf:cb:e9:9d:9a
Serial Number (int): 130217451750084827625094949686743768474
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 37:89:16:e1:38:0a:bb:6c:0d:9f:49:d9:5f:5e:8c:36:25:19:07:ec
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): c4:a3:6b:79:37:64:30:8e:22:68:12:59:2c:87:d5:81:01:a5:80:53
Fingerprint (sha256): 25:87:3b:5e:75:eb:59:a4:98:10:20:3c:2a:8f:cb:a3:33:d6:96:20:42:1a:8f:e4:96:a2:06:3f:95:d0:01:d9

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate pgp.governikus.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pgp.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pgp.governikus.de
anbieter.ausweisapp2.governikus.de
www.anbieter.ausweisapp2.governikus.de
jahrestagung.governikus.de
www.jahrestagung.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for pgp.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130217451750084827625094949686743768474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-14 12:18:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 12:18:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM030716418'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pgp.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820791383099183889674849225401961681411667806534645871232791687596181118897482921824540399056463975816579653940268149721537390940712274561489330416930481443907463895700114814070010404179758039490185168811331944390741164720392097681304364765827536010506136033402989985337484411986297391547999493465468029380941094980907890325145634146966459425180971941986600362375453742605665045731595771784328451877374748815419232559612269303470094903798533570370624067196390943348053573334776353956636591985697755161746380205682406806718795850055969350221847954697896080798090859433114391363764054432192141984315212057954611418653431906149252875037847522636716680478496742703186907468515939848421429892220377481392918262942986548644701288853299633975885660875893603111641030407273915329382239669591334746830905069079781843773788803898492239452055376725036112284129534151524846696210651420844455064933156886417513948522713498133016168334544303790900118400425794854037139094047550393547274207267421016734079115559780855659337290839669180127465120896141556986224657195071648588513464552922831212852396520063245517576764412339139142183490527466425519236912335400151556240959837586595730910924965134663439895384109495901675429543803742551298365999575257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1084 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1080 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgp.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anbieter.ausweisapp2.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anbieter.ausweisapp2.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jahrestagung.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jahrestagung.governikus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							378916e1380abb6c0d9f49d95f5e8c36251907ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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