ADFSSigning-fed01.fiatgroup.com

- FCA SERVICES S.P.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:9d:36:3b:34:75:59:fe:ec:ec:45:c4:09:93:0a:2f was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FCA SERVICES S.P.A.

Organization: FCA SERVICES S.P.A.
Organization unit: ICT Architectures
Locality: TORINO
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:9d:36:3b:34:75:59:fe:ec:ec:45:c4:09:93:0a:2f
Serial Number (int): 18096254492809149641994513181505161775
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c5:ce:77:99:a4:7d:2e:f2:23:ab:45:08:6f:1a:52:2d:24:2b:87:b2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e3:fc:8b:a7:90:a0:54:54:55:bc:5e:ab:a6:ea:ab:3e:ee:c1:59:45
Fingerprint (sha256): 03:04:e9:24:b5:e8:7a:c7:1a:81:04:89:7c:f0:8d:56:1e:3a:8a:41:d5:9a:b2:07:5d:58:b4:75:dd:21:b7:71

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ADFSSigning-fed01.fiatgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ADFSSigning-fed01.fiatgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ADFSSigning-fed01.fiatgroup.com

Other certificates including the domain name fiatgroup.com

(limited to 100 certificates)
ADFSEncryption-sts.fiatgroup.com
ADFSSigning-fed01.fiatgroup.com
fiatsaphr.fiatgroup.com
lyncaccess01.emea.fcagroup.com
mail.fiatgroup.com
ucfe.voice.fiatgroup.com
email.fiatgroup.com
www.iam.fiat.com
email.fiatgroup.com
vcse-itsem02d22.video.fiatgroup.com
*.fiatgroup.com
pxhwdsap.fiatgroup.com
fed01.fiatgroup.com
fb.fiatgroup.com
lyncfepool01.emea.fcagroup.com
fiatsaphr.fiatgroup.com
vcse-itsem02d09.video.fiatgroup.com
email.fiatgroup.com
saphr.fiatgroup.com
lyncaccess01.uc.fiatgroup.com
lyncpool01.fgcorp.fgad.fg.local
email.fcagroup.com
sts.fiatgroup.com
lyncextwebservices01.emea.fcagroup.com
saphr.fiatgroup.com
sts.fiatgroup.com
globalaccess.fiatgroup.com
vcs-itsem02d03.video.fiatgroup.com
ucfa.voice.fiatgroup.com
sts.fiatgroup.com
edocma.fiatitem.com
fed-dev.fiatgroup.com
lyncextwebservices01.emea.fcagroup.com
tpmonitoring.video.fiatgroup.com
lyncextwebservices01.uc.fiatgroup.com
collaboration.fiatgroup.com
ucfe.voice.fiatgroup.com
customersatisfaction.fiatgroup.com
customersatisfaction.fiatgroup.com
vcs-itsem02d03.video.fiatgroup.com
ADFSEncryption-fed01.fiatgroup.com
fed-dev.fiatgroup.com
email.fiatgroup.com
www.iam.fiat.com
www.iam.fiat.com
lyncextwebservices01.emea.fcagroup.com
saphr.fiatgroup.com
www.autoexpert.it
im.uc.fiatgroup.com
spgec.fiatgroup.com
email.fiatgroup.com
prhwdsap.fiatgroup.com
ucfe.voice.fiatgroup.com
email.fcagroup.com
uc.fiatgroup.com
tpcalendar.video.fcagroup.com
www.iam.fiat.com
www.iam.fiat.com
ADFSSigning-sts.fiatgroup.com
spgec.fiatgroup.com
lyncextwebservices01.emea.fcagroup.com
fiatsaphr.fiatgroup.com
outlook.fiatgroup.com
lyncaccess01.emea.fcagroup.com
fed01.fiatgroup.com
collaboration.fiatgroup.com
lyncpool01.fgcorp.fgad.fg.local
email.fcagroup.com
vcs-itsem02d03.video.fiatgroup.com
lyncaccess01.emea.fcagroup.com
fed01.fiatgroup.com
ADFSEncryption-sts.fiatgroup.com
*.fiatgroup.com
ADFSSigning-sts.fiatgroup.com
ADFSEncryption-sts.fiatgroup.com
tpcalendar.video.fcagroup.com
collaboration.fiatgroup.com
edocma.fiatitem.com
im.uc.fiatgroup.com
purchasing.fiatgroup.com
uds.fiatgroup.com
ADFSSigning-sts.fiatgroup.com
sts.fiatgroup.com
www.iam.fiat.com
netseeker.fiatgroup.com
sts.fiatgroup.com
hrmobile.fiatgroup.com
ucfe.voice.fiatgroup.com
netseeker.fiatgroup.com
hpadsm.fiatgroup.com
customerfeedback.fiatgroup.com
lyncaccess01.emea.fcagroup.com
fed01.fiatgroup.com
saphr.fiatgroup.com
customersatisfaction.fiatgroup.com
lyncextwebservices01.emea.fcagroup.com
tp-exc1.video.fiatgroup.com
lyncfepool01.emea.fcagroup.com
www.iam.fiat.com
fed-dev.fiatgroup.com

Certificate

The complete raw certificate details for ADFSSigning-fed01.fiatgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNCUH8zLfPd8OdbovRXg
KFDXS3brRiAI7tzYmd4ODOSx/Uv0lJyvBAlgKuLriW1px3RO4FArL7yqf8yrCkyu
z3Fw+elT6JUsWqNkeofCESDKRFGFDo1i8oGw2QB0Keb39S75yG9r93gbuiOz/Ame
YqwhXh93hJirmUyDhE/Fbf9fdsrDF/7Bot4+DUgzwbhZqd4C8p8bVoevP2Tl+5Vv
Vg2VYWCWt4ycRVHHcE5dpv3a9WEbWRBQ62ootisUfn+fsmEZOwehk0vSew0+u7Mc
EIswBie/89JmQkQL6g70xHUSwt/SUOmTDWCanBbBe3CQ39qgb7pJ6GQ1aprYJuTu
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18096254492809149641994513181505161775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TORINO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FCA SERVICES S.P.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT Architectures'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ADFSSigning-fed01.fiatgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25855468159199040002588037083469345248218461767295373677951394470847939026097753623844033645349225443018489662600015777570600210767270309857800854119315674738063332211444915505804621448447634702494300302460348638886766784736172882881070113796508192800305656054858972183278514398120874181846741118404982062039000720243559919407380584878312159054608651555296566934851729377698347669428667028566811433695283271309796720688168093424574615332793976013044344894140503037755472834212741171093114537897121254079003546181003477804067122144137875086098787021629301331608428238569452937271826603398923204330124557971295316536937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5ce7799a47d2ef223ab45086f1a522d242b87b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ADFSSigning-fed01.fiatgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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