EPBC.ServiceProviderPortal.gov.bc.ca

- Government of the Province of British Columbia -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number f1:1e:d3:80:00:00:00:00:50:d6:a2:0f was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Government of the Province of British Columbia

Organization: Government of the Province of British Columbia
State / Province: British Columbia
Locality: Victoria
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f1:1e:d3:80:00:00:00:00:50:d6:a2:0f
Serial Number (int): 74623153922043727369232359951
Serial Number lenght: 96 bits, 12 octets

SubjectKeyId: cb:d2:2f:36:be:c7:43:db:94:cd:5e:a3:dd:de:8f:51:06:66:33:30
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 12:4c:20:b8:de:1f:c4:2e:b4:3b:f5:e6:e5:e5:21:fa:22:dc:b0:93
Fingerprint (sha256): 00:01:77:93:bc:5e:9f:c5:82:79:b8:aa:4c:27:08:c1:bd:54:92:33:08:86:88:dc:2f:25:54:2e:4c:f4:11:8a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate EPBC.ServiceProviderPortal.gov.bc.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for EPBC.ServiceProviderPortal.gov.bc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epbc.serviceproviderportal.gov.bc.ca
www.epbc.serviceproviderportal.gov.bc.ca

Other certificates including the domain name gov.bc.ca

(limited to 100 certificates)
EPBC.ServiceProviderPortal.gov.bc.ca
tst-dit.th.gov.bc.ca
carbonregistry.gov.bc.ca
test.ssbc-client.gov.bc.ca
livesmart.empr.gov.bc.ca
services.hub.gcpe.gov.bc.ca
dev.publicsectorcompensation.gov.bc.ca
gww.lcs.gov.bc.ca
www.mtonline.gov.bc.ca
uat.partners.aved.gov.bc.ca
hub.gcpe.gov.bc.ca
adminqa.bpms.gov.bc.ca
sun.gov.bc.ca
devcal.bcregistrynames.gov.bc.ca
vanity.blog.gov.bc.ca
eval.www.cladws.bcexpresspay.gov.bc.ca
ivos.gov.bc.ca
uat.hub.gcpe.gov.bc.ca
quality.www.ws2.bcexpresspay.gov.bc.ca
webmaps.gov.bc.ca
test.ucmdb.gov.bc.ca
hranalytics.gov.bc.ca
*.lab.pathfinder.gov.bc.ca
*.nrs.gov.bc.ca
idtest.gov.bc.ca
dev.bcregistrynames.gov.bc.ca
ptr.qp.gov.bc.ca
test.a100.gov.bc.ca
onlinelearning.gov.bc.ca
icm.ext.gov.bc.ca
*.ext.crm.mtics.gov.bc.ca
allstars.sdsi.gov.bc.ca
onestop.gov.bc.ca
swsinterface.icmdev.mcf.gov.bc.ca
cares.pss.gov.bc.ca
news.gov.bc.ca
gis.hlth.gov.bc.ca
arcmaps.gov.bc.ca
www.sail.aved.gov.bc.ca
pacifico.cas.gov.bc.ca
b2b-prod-rt.vs.gov.bc.ca
test.my.gov.bc.ca
admin.dev.addresschange.gov.bc.ca
dev.bcregistryallservices.gov.bc.ca
jade.nrs.gov.bc.ca
gww.axis.gov.bc.ca
evss.vs.gov.bc.ca
d1.bconline.gov.bc.ca
testbni.gov.bc.ca
idtest.gov.bc.ca
geobc.gov.bc.ca
eservice.ag.gov.bc.ca
proje.realbc.gov.bc.ca
ehealth.gov.bc.ca
fwxwww2.hpr.for.gov.bc.ca
cloud.gov.bc.ca
test.livelink.gov.bc.ca
gww.tacs.gov.bc.ca
11520560.peerly.app
sws.interface.mcf.gov.bc.ca
hambc.hlth.gov.bc.ca
dev.services.hub.gcpe.gov.bc.ca
testbni.gov.bc.ca
billing-and-payment.revenueservicesbc.gov.bc.ca
test.a100.gov.bc.ca
gww.svn.educ.gov.bc.ca
dir.gov.bc.ca
test.addresschange.gov.bc.ca
intra.dir.gov.bc.ca
wsidmngr.gov.bc.ca
sbcstatus.id.gov.bc.ca
rptp.bcas.gov.bc.ca
emis.hlth.gov.bc.ca
abesap.teamwork.gov.bc.ca
sandbox.realbc.gov.bc.ca
www.pp.qp.gov.bc.ca
gww.blog.gov.bc.ca
drp.icm.ext.gov.bc.ca
gww.gov.bc.ca
alpaca.status.merchlogix.com
pp.qp.gov.bc.ca
cdwtest.mcf.gov.bc.ca
77000.gov.bc.ca
appsd1.bconline.gov.bc.ca
idtest.gov.bc.ca
www.reportfraud.gov.bc.ca
pingu.lab.ag.gov.bc.ca
www.ears.gov.bc.ca
earlychildhoodeducator.mcf.gov.bc.ca
*.bcstats.gov.bc.ca
sdc.gov.bc.ca
test.bcregistryallservices.gov.bc.ca
swsinterface.icmdev.mcf.gov.bc.ca
Adopttrain.mcf.gov.bc.ca
3ds-status.outseer.com
*.orgbook.gov.bc.ca
tst.posse.th.gov.bc.ca
blog.gov.bc.ca
heat.myeducation.gov.bc.ca
dev.addresschange.gov.bc.ca

Certificate

The complete raw certificate details for EPBC.ServiceProviderPortal.gov.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rDfjMQi2qr7pr7DI/+o
PSEAWfAr93jpaCz+uKjAKjgD+garsjWjJIWHkVCSEoz7q+g6c+rA83YbbXqW9muo
qq9lTI9SXY+cntbFYFTlRdN2oZLKfgFTSMzR3XUjP7aidzNOikySzrsdTpSmeq9/
GmA178kyxKUYmf4ezqd7am5yrx1B12y4oau0+KvoV9f+9c56vFDbDKOI1nKp8WrX
+StQ62bhjHolBlgX1XYHg8R0n0xwFym1cG4DwdLF8/wFhP/ke7PTAKD3B+lQcOBx
FDDN9NXlIa+KksXbUH+NwfO50n+59NL9IvmltPEuWryYsuZbMHGtl+kPqiMQShSw
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74623153922043727369232359951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-11 21:39:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-27 22:09:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government of the Province of British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EPBC.ServiceProviderPortal.gov.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27102216708917838069730474473984458096280551379082036414489771369801829181789189460175026887189324212458139855051097512095664840887337885453706098514511713691627897019354820176381877880076749492111837807713129733297708792886006067350497795856369833696507978199001173627373406900042108399929955695014258989244238254797367551629226903154867890584074597539306375068686757954042361639001889790289342831726765244273240031133350989206120465228408469137844362722701233572273564054503276952637344731590727416203219494705414817582175178119625718226861756276366324492191838772261352201708600790403604482134053788252052934406191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epbc.serviceproviderportal.gov.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epbc.serviceproviderportal.gov.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbd22f36bec743db94cd5ea3ddde8f5106663330
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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