mgat.ext.here.com

- HERE Global BV -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 7a:55:a7:14:2b:d1:9a:06:ce:1c:72:8a:af:91:66:e6 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

HERE Global BV

Organization: HERE Global BV
Organization unit: POIT-Automotive
State / Province: Noord-Brabant
Locality: Veldhoven
Country: NL

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:55:a7:14:2b:d1:9a:06:ce:1c:72:8a:af:91:66:e6
Serial Number (int): 162610549479263505245525098035466561254
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): 4a:6b:bb:6a:e3:57:c8:c9:e5:3e:de:36:86:d5:78:89:78:fc:e9:f4
Fingerprint (sha256): 01:1b:26:14:c7:fd:b1:2d:e3:eb:56:93:93:db:84:b1:97:f4:3b:92:2b:38:02:d2:7a:60:b4:77:12:db:70:cf

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate mgat.ext.here.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mgat.ext.here.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mgat.ext.here.com

Other certificates including the domain name here.com

(limited to 100 certificates)
qa.rd.account.here.com
proxy.refclient.ext.here.com
xyz.api.here.com
graf.eventbroker.api.here.com
eu.scbe.api.here.com
san3.here.com
test.here.com
cit.ppc.hub.api.here.com
*.tracking.here.com
amum.cit.cc.api.here.com
cloudmaster-staging.thor.data.here.com
artifact.api.platform.here.com
demo.acs.ext.here.com
pchilyncFEpool.ad.here.com
patlmta05.core.in.here.com
*.izumi.ext.here.com
listings.in.here.com
myphone.uc.here.com
st.backstage.here.com
*.slp.pos.here.com
*.stg.navigation-voice.data.here.com
admin-service.api.platform.in.here.com
mgat.ext.here.com
api.release.in.here.com
amum.ctt.cc.api.here.com
stg.mapfeedback.here.com
navigation-voice.data.here.com
scd.pipelines.platform.here.com
Pamsdc22.ad.here.com
corphyperion.ad.here.com
avalon.lastmile.aws.in.here.com
splunkforwarder.ppc.hub.api.here.com
mgat.ext.here.com
pamslyncpool.ad.here.com
splunkforwarder.3dearthcore.here.com
qa.primeplaces.here.com
*.data.api.platform.here.com
image.maps.cit.api.here.com
*.3dmap.here.com
traffic.cit.api.here.com
dv.feedback.here.com
traffic.ctt.api.here.com
mapcreator.here.com
emtadmin-prod.in.here.com
*.dev.had.in.here.com
grafana.metrics.int-2-aws-us-west-2.k8s.in.here.com
jaguarshop.here.com
refroute.routing.in.here.com
partneruniversity.here.com
emprovisioning.prd.prd-1-aws-eu-west-1.k8s.in.here.com
splunkforwarder.cofense.here.com
myphone.uc.here.com
pipelines.api.platform.in.here.com
*.traffic.data.here.com
cap-test.places.dev.api.here.com
uatspca.in.here.com
qa.collector.data.here.com
cpdev.aws.in.here.com
placesmanager.api.here.com
*.apf.in.here.com
access-change.api.platform.here.com
cit.tracks.here.com
intranet.here.com
binary.scbe.sit.api.here.com
rd.account.here.com
*.rendering.in.here.com
mack.it.here.com
PCHIDC03.AD.HERE.COM
int.account.here.com
*.cdn.places.cit.api.here.com
odin.in.here.com
wse.cit.api.here.com
placesmanager.stg.api.here.com
sit.saas.awsmarketplace.here.com
map.hybrid.ccv.api.here.com
route-oet.hybrid.cc.api.here.com
hapi-datastore-proxy-perf.platform.sit.here.com
pipelines.api.platform.here.com
*.consent.api.platform.in.here.com
marketplace.api.platform.in.here.com
saeljira-dev2.it.here.com
san4.here.com
palamida.in.here.com
sca.api.in.here.com
enterprise.here.com
placescontent.nokia.com
*.blob.data.api.platform.here.com
email-quarantine.in.here.com
scbe.api.here.com
maphub.cit.api.here.com
svip.it.here.com
wotan-stg.in.here.com
splunkforwarder.positioningapi.here.com
maphub.cit.api.here.com
resource-access.api.platform.here.com
nps.sit.data.here.com
origin.prd.cld.vcdn.data.here.com
confluence.it.here.com
*.artifact.api.platform.in.here.com
traces.sit.api.here.com

Certificate

The complete raw certificate details for mgat.ext.here.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lLxhC4Kc559WFI2Qx8P
fryRBEtKS4nW2lNpZz1HVRSsjBMTjDTv78KAJKHi+cjO+mPGymQsb1DzfpAKVqqV
l5oQahb3SyYx/bA0N5XZNPTS2dbA+dL4dLv56w5oPMhyz75CSQSxmlZO0tC1ywpD
CYdtczhVwESYq1rR6/zoUewlVAIlBn0o1XHVvIyXJE0Nqbn/UNixS5cljevgRSt9
QQn+wHKbfj5kUiYy8dPeW3hJGZQW9x+99O7zN/c1ACeRL6rbdxTP7MV+yspx4dnd
eAxndxEGgcQUnbjh/wr+MV63gxBmiboiMfCJyv1SMf0X27wPRwghK3G6PyHjrN1f
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162610549479263505245525098035466561254
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Veldhoven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HERE Global BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'POIT-Automotive'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mgat.ext.here.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28570757848685086213887766804437588017647021659086946279320808876612002278838296129218533672815197373016621767381929562586585227127950832139912788637090524570442827329959707176397847416830137152925029256295198066949330862712593262861183362481259826139435680009275304968779326177089933141456601558410721861723542141026870796562421602493149578808412415311859417809314298731304829339822347780377756521791661660637536595944142711726482750257473295428275854231641266685154405524731845316234386346765494452658763099082145285356594487241946831411852208350327831467676852593173131445632797741849303818159914449744852460330919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgat.ext.here.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000159f0a561d50000040300473045022100d7a358d5126bbcde3412a5aa933aa00c65aec8a1037d98a3789cca02f16d36b902207e84399d6b714ab1410d99dec94786f27ca53b135610a8dda1e3a6373592ebe0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000159f0a562040000040300473045022100ce5b8dd50ad7f39753d3ac31d4c20db2e6efdacfe411f60a0e65ec21b54b05bf02201602608ccf50024312e3aaf3dcb0cd0997638eb770d22ee6495a276d0fee70b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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