wcvideo.libertymutualgroup.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 16:f8:c1:41:b2:03:3c:8f:ed:1d:ce:ce:90:ef:0c:c3 was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Enterprise Technology Services
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:f8:c1:41:b2:03:3c:8f:ed:1d:ce:ce:90:ef:0c:c3
Serial Number (int): 30534625238161099177950764603286686915
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): ae:1e:8b:70:73:f1:97:af:b4:18:ba:5e:08:75:ae:fc:c7:b7:39:af
Fingerprint (sha256): 00:99:e4:d9:fa:28:7f:ff:22:e7:57:03:2d:ba:14:5d:d4:f3:9a:01:b5:f7:b2:50:63:80:67:e8:80:95:f2:93

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate wcvideo.libertymutualgroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wcvideo.libertymutualgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wcvideo.libertymutualgroup.com
wcvideo.helmsmantpa.com

Other certificates including the domain name libertymutualgroup.com

(limited to 100 certificates)
PeopleAtLiberty.com
wcvideo.libertymutualgroup.com
test-securefile.libertymutual.com
stage-stui.libertymutualgroup.com
libertymutual.myinstantincentives.com
cicct-taskrouter-gateway.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
test-equote.libertymutual.com
vantageporttest.libertymutual.com
kdc-secure.business.libertymutualgroup.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
perf.libertymutualgroup.com
www.libertymutualgroup.com
test-icasemanagersecure.libertymutual.com
clientlist.qa.safeco.com
libertymutual.myinstantincentives.com
stage-stui.libertymutualgroup.com
whalebot.libertymutual.com
dev.lmemergencyportal.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
tst-business.libertymutualgroup.com
whalebot.libertymutual.com
perf-www.libertymutualvantageport.com
PeopleAtLiberty.com
stui.libertymutualgroup.com
techcampus.libertymutual.com
securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
ni-newsbrief.libertymutualgroup.com
tst.libertymutualgroup.com
www.careers-test.libertymutualgroup.com
libertymutual.myinstantincentives.com
www.business.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
af.libertymutualgroup.com
stage-af.libertymutualgroup.com
techcampus.libertymutual.com
test-claimseft.libertymutualgroup.com
securefile.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
perf-tuition.libertymutual.com
test-securefile.libertymutual.com
whalebot.libertymutual.com
steps.libertymutualgroup.com
securefile.libertymutual.com
wcvideo.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
business.libertymutualgroup.com
business.libertymutualgroup.com
tst-wcvideo.libertymutualgroup.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
techcampus.libertymutual.com
test-icasemanagersecure.libertymutual.com
libertymutual.myinstantincentives.com
techcampus.libertymutual.com
af.libertymutual.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
perf-www.libertymutualvantageport.com
cicct-taskrouter-gateway.libertymutual.com
dev.lmemergencyportal.com
securefile.libertymutual.com
perf-www.libertymutualvantageport.com
www.careers-test.libertymutualgroup.com
test-securefile.libertymutual.com
PeopleAtLiberty.com
www.careers-test.libertymutualgroup.com
techcampus.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
cicct-taskrouter-gateway.libertymutual.com
securefile.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
test-securefile.libertymutual.com
www.libertymutualgroup.com
techcampus.libertymutual.com

Certificate

The complete raw certificate details for wcvideo.libertymutualgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiwnRIRjfK8QyEVM+ttT
/o9HlZ1o8SLkd1pDrj8/CpNjXtHSpmkNBMw6rZMhW8AyJnXZUaA1Tlxzpi+OpcEh
X8EWFLwAp+CXhoCCGFxVuDZoxD0qW9qguSI9oyOuT3hsEYqdb/9YUcFcmd+hz8tZ
rfezt69G7r35rtkdyLcAQuG9S/Bni+RrUynRbUjQpHRhl0p3WZYnl5TA+vZxHyY5
B0zbz3BgEXxU+XrFJ/MrNyOVlHgJCBN0/SYS8hvuvpdJAZi8f3EqkaqPIWexzvPA
aU0uInql85yM/MuCInNFjJF+kanGkhXON26NpFc7hGd+u8Ix0isb8C+Zgn+AQT+Z
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30534625238161099177950764603286686915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Enterprise Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wcvideo.libertymutualgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25521910450862559052666996102399249436869681998005024241616472366326877374228080595444782091583808193387147836938364832259735376081842657859373817380359758048762403615054423675025060917640574031207881175451038862866594074989128784069998780683437208682593595081256107164194740847455617361236066439048741097704540791449147047572322076506342494638150025235800702388571662801288698493186620200357002484926252411806020494565804377698924419780174908664674845354469097311388819526713671107381200021286005225561598331561800582766121016328184460768845726170324989102356475769299438151621102890843587061703301976779303788976567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.helmsmantpa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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