apim-find-epao-api.apprenticeships.education.gov.uk

- Department for Education -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 77:83:b0:f8:d2:47:20:8d:a0:1c:6c:d6 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Department for Education

Organization: Department for Education
State / Province: Greater Manchester
Locality: Manchester
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 77:83:b0:f8:d2:47:20:8d:a0:1c:6c:d6
Serial Number (int): 36987921177555210201621884118
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c0:77:5d:bc:37:50:ac:89:dd:88:b3:25:f8:09:47:f8:b9:78:e3:b9
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 04:3c:0a:f5:fc:58:a0:85:da:a6:1f:84:ec:8b:44:41:17:e0:77:49
Fingerprint (sha256): 03:ee:36:fe:0d:ff:6f:2c:8a:6a:0c:da:10:47:5d:f6:fd:cc:35:70:4a:3d:42:0e:d8:4b:9e:09:d9:31:5e:dd

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate apim-find-epao-api.apprenticeships.education.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apim-find-epao-api.apprenticeships.education.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apim-find-epao-api.apprenticeships.education.gov.uk

Other certificates including the domain name education.gov.uk

(limited to 100 certificates)
ilsype.education.gov.uk
complete.education.gov.uk
fsm.education.gov.uk
cipdev.docs.platform.education.gov.uk
bfr-pp.education.gov.uk
plan-your-grant.education.gov.uk
Pr-nndr-scanservice.education.gov.uk
Report-extremism.education.gov.uk
caaradmin.education.gov.uk
onlinecollections-preprod.education.gov.uk
manage-training-for-early-career-teachers.education.gov.uk
www.keytosuccess.education.gov.uk
operations.platform.education.gov.uk
education.gov.uk
oat-api-services-fcs.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
gg-auth.education.gov.uk
test.docs.platform.education.gov.uk
applyforerasmusgovernmentguarantee.education.gov.uk
pp-ws.lrs.education.gov.uk
ssl809275.cloudflaressl.com
apim-find-epao-api.apprenticeships.education.gov.uk
traineeteacherportal-dv.education.gov.uk
consult.education.gov.uk
api-lrs.education.gov.uk
*.education.gov.uk
*.traineeships.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
idp.lrs.education.gov.uk
consult.education.gov.uk
schooljobs.education.gov.uk
console.apprenticeships.education.gov.uk
publish-teacher-training-courses.education.gov.uk
findapprenticeshiptraining-api.apprenticeships.education.gov.uk
dms-information-exchange.education.gov.uk
section96.education.gov.uk
apim-ltm-api.apprenticeships.education.gov.uk
publish-teacher-training-courses.education.gov.uk
test-api-customerengagement.platform.education.gov.uk
ilsype.education.gov.uk
doat-web-operations-fcs.education.gov.uk
admin.apprenticeships.education.gov.uk
proxy.signin.education.gov.uk
apim-fun-api.apprenticeships.education.gov.uk
approvals.providers.apprenticeships.education.gov.uk
api-services-fcs.education.gov.uk
teacherservices-pp.education.gov.uk
schoolexperience-staging.education.gov.uk
pp-lrs.education.gov.uk
consult.education.gov.uk
lrspaas-test08-idp.dev.lrs.education.gov.uk
apply-the-service-standard.education.gov.uk
lrs.education.gov.uk
traineeteacherportal.education.gov.uk
idp.lrs.education.gov.uk
idp.lrs.education.gov.uk
consult.education.gov.uk
transfers-api.apprenticeships.education.gov.uk
help.apprenticeships.education.gov.uk
www.ecs2.education.gov.uk
collectdatauat.education.gov.uk
www.keytosuccess.education.gov.uk
cmp-lrs.education.gov.uk
ur1-idp.lrs.education.gov.uk
test.docs.platform.education.gov.uk
nca-pr.education.gov.uk
assessors-api.apprenticeships.education.gov.uk
lrspaas-test01.dev.lrs.education.gov.uk
sni1c3d7gl.wpc.edgecastcdn.net
signin.education.gov.uk
schoolexperience-ta-recruit.education.gov.uk
clauat.education.gov.uk
doat-api-services-fcs.education.gov.uk
adt.apprenticeships.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
fsm2.education.gov.uk
status.apprenticeships.education.gov.uk
forecasting-api.apprenticeships.education.gov.uk
apply-for-qts-in-england.education.gov.uk
studentbursary.education.gov.uk
*.industryplacementmatching.education.gov.uk
dfe-hradvice.education.gov.uk
teachingjobs.education.gov.uk
education.gov.uk
sfs-dev.dev.funding.education.gov.uk
signin.education.gov.uk
subscriptions.apprenticeships.education.gov.uk
mta-sts.service.education.gov.uk
tasks.apprenticeships.education.gov.uk
pensionsregulator-api.apprenticeships.education.gov.uk
efadatacollections-stg.education.gov.uk
*.dev.lrs.education.gov.uk
help-for-early-years-providers.education.gov.uk
pp-services.signin.education.gov.uk
collectdatauat.education.gov.uk
refdata.apprenticeships.education.gov.uk
proxy.signin.education.gov.uk
ssl809273.cloudflaressl.com
status.apprenticeships.education.gov.uk
api-calculate-funding.education.gov.uk

Certificate

The complete raw certificate details for apim-find-epao-api.apprenticeships.education.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5KGjtr7VJuMVNkzr6bD
R4BlSELHbmcc9DqtbNCu8BjezcclKPTwq2HzGYVWclPbFXXKhCwlhy+ik9L0UnwP
2GKKSFnnl5kefj2Er6UIWOJl2Vnb7ApoKNUJqnSL3vFeVrCt6jVxKphLSWrUrxb0
MUYa+26LyusqrvLR5qZC/M2gNLNnBxgt9TtuOSjyxpMaTSaXIhsJsPcyygvCJskU
mneZFecNZpRxcudJAebrnlLVE/nAtP9MMv2Vi7RCMAMwVpOL53COHxQQaHyxnazm
X/Y4lqlJVrVMYr+zgCtV9P7jnVIbrgQjl5WuY/B2GeUlnAe80sc5CZge9hvwUwBb
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36987921177555210201621884118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-01 00:00:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department for Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apim-find-epao-api.apprenticeships.education.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24183770723369169398526110683364185571599721589413229748712966198966923425574691999773381738006887679445844579621106783985501747624708958111391646038541686719669762432218832041751099244465636406106073916370536763654096991239065251824291232512445615285674657007291831512705721687301568510443129343343933917129599903457235065887419390610959645913906084826444785094732863925688939167410363834256666264757955885944369632874350798811662227062455801291711208705877723812508668256727901794857787637673586692048064386569013198781470786006085692923332275630438653237584714841204881547754340612966194993736295970435626614938501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim-find-epao-api.apprenticeships.education.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0775dbc3750ac89dd88b325f80947f8b978e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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