mail.be.ch

- Amt für Informatik und Organisation des Kantons Bern -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 1c:63:72:c1:e0:b1:b2:37:02:98:74:92:81:de:e8:2f:b3:30:d6:1b was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Amt für Informatik und Organisation des Kantons Bern

Organization: Amt für Informatik und Organisation des Kantons Bern
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:63:72:c1:e0:b1:b2:37:02:98:74:92:81:de:e8:2f:b3:30:d6:1b
Serial Number (int): 162069512131484797005824713787073809507157071387
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 5d:61:7d:80:02:7a:9d:8d:14:0a:2b:3f:44:4b:85:20:18:e5:23:6f
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): b7:92:e7:7c:64:f3:f5:59:6a:d5:b6:0e:06:a1:46:30:90:63:40:06
Fingerprint (sha256): 00:4f:98:e4:29:33:b8:c8:8d:55:6a:f3:7a:d1:ca:ea:e7:32:f9:38:bb:55:5d:41:da:f7:b7:52:50:74:be:40

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate mail.be.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.be.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.be.ch
autodiscover.be.ch

Other certificates including the domain name be.ch

(limited to 100 certificates)
www.lms.apps.be.ch
ftp.be.ch
www.collaboration.apps.be.ch
k3013msx201t.infra.dev.police.be.ch
mail.be.ch
www.efj.vol.be.ch
iiz.docs.be.ch
www.faechernet.erz.be.ch
pr.docs.be.ch
www.portal.sites.be.ch
mailhub1.police.be.ch
ipmanagement.net.be.ch
a27a-www-fisimport-b.be.ch
k3013ads004.infra.police.be.ch
a27a-www-itime-b.be.ch
wwwin.ebere.be.ch
www.gef.be.ch
www.extgrcouch.apps.be.ch
mi.police.be.ch
www.aare.bve.be.ch
www.bkd.be.ch
bemedko.apps.be.ch
www.nfam.apps.be.ch
www.egi.apps.be.ch
a27a-www-desktopapi.be.ch
www.ebpp-test.apps.be.ch
www.hbav.sites.be.ch
www.sdep-test.gef.be.ch
www.oereb2.apps.be.ch
wwwin.finanzviz-admin-test.apps.be.ch
sso-test.be.ch
a3ya-rs-dwh01.infra.be.ch
www.lv95.bve.be.ch
B3012PBDE01V.bve.be.ch
www.testbeurteilung.apps.be.ch
wwwin.uams.apps.be.ch
www.wada.sites.be.ch
wwwin.scodi-test.infra.be.ch
gbav.portal.be.ch
wwwin.mammut.sv.fin.be.ch
integrationsangebote.apps.be.ch
outlook.police.be.ch
remotevdifin.portal.be.ch
www.pwreset.be.ch
outlook.be.ch
www.bvd-entscheide.apps.be.ch
hannselade.pom.be.ch
www.lena-admin.apps.be.ch
www.awcalculator-alpha.sv.fin.be.ch
mailhub2.police.be.ch
www.vpzdispointernet.apps.be.ch
sap-solmana-dev.apps.be.ch
www.apps.be.ch
www.upd.gef.be.ch
cagpom.portal.be.ch
www.sdep.gsi.be.ch
www.qv.apps.be.ch
a6na-mta-01.infra.police.be.ch
www.boden.sites.be.ch
www.ksvinternet.apps.be.ch
wwwin.docuware.infra.be.ch
wwwin.assistme-entw.gef.be.ch
teg.police.be.ch
www.beurteilung.apps.be.ch
wwwin.pendenza-test.apps.be.ch
www.portalbackend.be.ch
www.vpzdispointernet.apps.be.ch
www.grudis.apps.be.ch
a27a-www-idserver.be.ch
www.jgk.be.ch
www.oerebcug.apps.be.ch
www.transfereinfach.apps.be.ch
hannselade.pom.be.ch
www.wada.sites.be.ch
outlook.police.be.ch
testapi.bista.zh.ch
amtsblatt.be.ch
hannselade.pom.be.ch
wwwin.dabbawala-dev.gsi.be.ch
www.energiefoerderung.bve.be.ch
fiobvddev.infra.be.ch
www.apps.be.ch
www.belogin.directories.be.ch
hannselade.pom.be.ch
a27a-www-fisimport-b.be.ch
amtsblatt.be.ch
mailhub2.police.be.ch
wwwin.assistme.gef.be.ch
wwwin.dendro.apps.be.ch
k3013msx231.infra.police.be.ch
cagvdifin.portal.be.ch
blog.police.be.ch
a5rt-www-taxinfo-login.infra.be.ch
a5ru-www-taxinfo-login.infra.be.ch
*.erz.be.ch
a62bktadsb00.infra.be.ch
k3013ads001.infra.dev.police.be.ch
weiterbildung-kurse.apps.be.ch
a27q-www-fisimport-b.be.ch
k3013srv029um.infra.police.be.ch

Certificate

The complete raw certificate details for mail.be.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zoCfjXtSI9zfwB9n7cq
DpQh09/dakatpXwc/BEBGsezVKBT0MdFxokR2RD1VGqmE6DP0MdkkL8PVodbYiZi
YNf4qGv60q2+FKxjhGKTzFodwA4K8lsftLgakwKk1seVc/lNphYKa8vzMs7tC7BR
y6yhKDONmORqXRwBH9fABLfureLDqPubvHnT3mWK6b9hK2O+VnyzhDEwXy7TW5DZ
8G4/4c6zTptxLaCbo2oOMR6DFc3jHugVC+IGe6/fifIHuRdQUGPDbDZuHgucW51w
My+DuTr1nsrE23NXKTfu7tqoryqzCuGl3ILFMNBHLxA+AhrvBqAHq+rJ5T/ecBRz
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162069512131484797005824713787073809507157071387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-16 13:26:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-08 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amt für Informatik und Organisation des Kantons Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.be.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28179747675545361452268127704400633131637811298461009963525999313984197215097400165738177165487397851929593285677886257603836059464595161088039734388266535669521915529561501834045644850593401604235010290541691943276392740693062318102792497772834123912633114755938176174194918405304952717258850158108344257287633626960585113921477800388753952734435528272468585267972568098574080323436767395368631396335511170398960285690916479956480424368240460038503505208307371085629057565458198955703153607326401520927539040319826916484710139667311410640061868653504361919210118057622894707322595655648267795756758619776452752864163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.be.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.be.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d617d80027a9d8d140a2b3f444b852018e5236f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004329e9a29daf4e407bfd8997f28afbb2d1e9205afb1dd2fbef9b0243b9843a7d642dca0c4fb693c092fee9ba957e39ff0d4719e3bda4e80ce93937c3a3de9df246cdc209ec8e916f3a5b110b7ed5a6ab99c1263c7c13a36ebf23d01e95d6b4ac20c4f602efeede6d641e30a502612b77be176ffbd323ee36a641c9cb4ad1d0993ec7b0aa2c565c6d4af07a719fbe3571320b09817a939ac244a0d076b3e0de30689427b9937cca73ec3c973b8cb8ae7e563d139fee844f3caaaec532f961241408e235ea33e2246b3855786a3ccea14dd6f9c8ff2634a2800bf99bfa2d94e4dce9caf8043ceb914bd9c3e0290dd5dd06ea569bd213dd1496bfe784a885720116