bishop.ccs.neu.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:0b:9c:7b:75:bf:44:40:b7:9e:31:21:4a:65:9f:b0:20:32 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bishop.ccs.neu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0b:9c:7b:75:bf:44:40:b7:9e:31:21:4a:65:9f:b0:20:32
Serial Number (int): 352400250371222982231065448848841692422194
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4d:71:71:99:2b:0e:6c:1a:c1:a0:af:ca:a5:4c:55:fc:8d:03:08:d7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:82:2a:8a:95:b8:47:ad:59:69:e6:9e:4b:78:de:b3:a7:e5:25:6b
Fingerprint (sha256): 04:b7:96:1d:63:88:3a:8a:68:cb:4e:d1:59:40:c9:7e:09:fc:fd:4b:d0:c8:51:28:01:cf:95:2a:40:fa:cb:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bishop.ccs.neu.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bishop.ccs.neu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bishop.ccs.neu.edu
handins.ccs.neu.edu
handins.khoury.northeastern.edu

Other certificates including the domain name neu.edu

(limited to 100 certificates)
blackactivism.library.northeastern.edu
bouve.northeastern.edu
wehe-data.ccs.neu.edu
tas.ccs.neu.edu
revtr.ccs.neu.edu
revtr.ccs.neu.edu
studentemployment.neu.edu
www.pfw.neu.edu
subjectguides.lib.neu.edu
nsgradapps.ccs.neu.edu
fatconf18.ccs.neu.edu
www2.coe.neu.edu
trac.ccs.neu.edu
revtr.ccs.neu.edu
cloud.coe.neu.edu
mobidata16.ccs.neu.edu
revtr.ccs.neu.edu
cio.northeastern.edu
github.ccs.neu.edu
testnuevents.neu.edu
eprint.finance.neu.edu
cloud.coe.neu.edu
achtung-iredmail.ccs.neu.edu
arader.library.northeastern.edu
moniotrlab.ccis.northeastern.edu
neuidmtest.neu.edu
camd.northeastern.edu
tas.ccs.neu.edu
neubos3ss375v.nunet.neu.edu
nonet133-dc.nonet.neu.edu
dlam.neu.edu
pool01.nunet.neu.edu
www.basics.neu.edu
sf.neu.edu
quic.ccs.neu.edu
devmyneu.neu.edu
amer-san1.blackboard.com
lovesexandchoices.neu.edu
achtung-gitlab.ccs.neu.edu
ares.ccs.neu.edu
bos3673.nunet.neu.edu
bishop.ccs.neu.edu
weboard.slaw.neu.edu
ats.northeastern.edu
icnp18.ccs.neu.edu
revtr.ccs.neu.edu
revtr.ccs.neu.edu
ecda.northeastern.edu
imc16-wip.ccs.neu.edu
vdi-euc.ccs.neu.edu
testweb.neu.edu
achtung01.ccs.neu.edu
revtr.ccs.neu.edu
*.ezproxy.neu.edu
revtr.ccs.neu.edu
faculty.northeastern.edu
coopstatus.neu.edu
status.library.northeastern.edu
phdcomm.ccs.neu.edu
kwafoo.coe.neu.edu
neuidm.neu.edu
ilsprod.lib.neu.edu
pool02.nunet.neu.edu
howto.ccs.neu.edu
capitalprojectrequest.neu.edu
engcore.aeroweb.net
neche.northeastern.edu
www2.coe.neu.edu
internet-qoe19.ccs.neu.edu
faculty.northeastern.edu
achtung01.ccs.neu.edu
huskyhelper.northeastern.edu
ritchie.coe.neu.edu
gradapps.ccs.neu.edu
kwafoo.coe.neu.edu
lawlibraryguides.neu.edu
gradapps.ccs.neu.edu
nuplanning.neu.edu
revtr.ccs.neu.edu
riels.northeastern.edu
classroom.neu.edu
ill.lib.neu.edu
facebook-targeting.ccs.neu.edu
nesd17.ccs.neu.edu
lawlibraryguides.neu.edu
mobidata16.ccs.neu.edu
amplifier.seclab.ccs.neu.edu
ndss2015.ccs.neu.edu
ssl-research.ccs.neu.edu
fatconf18.ccs.neu.edu
nesd17.ccs.neu.edu
spectrumarchive.northeastern.edu
silc.ccs.neu.edu
amer-san1.blackboard.com
assist.neu.edu
revtr.ccs.neu.edu
artserver2.neu.edu
lawlibraryguides.neu.edu
nesd17.ccs.neu.edu
stockholm.ccs.neu.edu

Certificate

The complete raw certificate details for bishop.ccs.neu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgISBAuce3W/REC3njEhSmWfsCAyMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MDMwOTAzMTJaFw0yMzExMDEwOTAzMTFaMB0xGzAZBgNVBAMT
EmJpc2hvcC5jY3MubmV1LmVkdTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBALCuNXZg/JZjxY7ZsQw4FfvO2kiDN11TnKeXW5kWuvPtU6ZWuJrtv6MGkRea
67Q4PP1MYodnck6lV5V9N0E+PPEWfX8NAAD3JbqcGevl3GBz3fjxcExPpDBWvNk+
OxVA4m+Nc5Mr3wl0Rc45S1vEetYtC46w90yr5fzzQhURXEdgj0keEyHMFUX0Xh/2
x0MLzYrqOiJwvNmuGnUskO9cF/pdWcfuOAHHXbhMUw4UATmLFld3LOs1Ex5rvxVT
5cak7Yd1EP9Lzu5eu3kzf+kqTLCWVI+ese07WeSqju9unan1Pgr3N7HBx0QJJS5e
4omxwtlVOcuqsemXopBzkge9qUOfbkLDvn9fNWVOlwgzejfYFaNGb+WHJzkLeCgV
T6lSctIrKOIFKb0zyDHsRK9EXQy7YQ7mrv+ohIpcepTcdZejJrHBU8gblR4wz4Z6
s0VXrwwfhGprDf0AyWgunr18eKO9QuqmL7f3aBmydurZBq92w5ZE87iaM040Dg+E
Rawemm7iMWl+xUbaa7rNqFwEX3ZOcYIGy/olZ40IjyAW/C0yxCdq+JouRyAS/Oeu
nIWuOlh1YIpKizfRbatNm/zNiBXeV7t/eeLeNfjdQhmt7/AJQj8qqWZEVOYbFTBa
UNPpxXzdR9jzqAreKQxh1lIfsv1NIVkDOhprcrTboatXiPZTAgMBAAGjggJJMIIC
RTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFE1xcZkrDmwawaCvyqVMVfyNAwjXMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMFMGA1UdEQRMMEqCEmJpc2hvcC5jY3MubmV1
LmVkdYITaGFuZGlucy5jY3MubmV1LmVkdYIfaGFuZGlucy5raG91cnkubm9ydGhl
YXN0ZXJuLmVkdTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABibrZ
8gwAAAQDAEYwRAIgBWS7X21/kI2ncnnjGjfk2W8RHdW1b2d2RgNNcUl6XxgCIApu
ycf83MEgmF/jR8cTmHQerAcMROY+cNABJZo2IM7rAHYA6D7Q2j71BjUy51covIlr
yQPTy9ERa+zraeF3fW0GvW4AAAGJutnx+QAABAMARzBFAiBZ/LWWC4V+3EE7MUwW
fLZQKV5Ct5ggRVb3Vdq7dPo1SQIhAIw145kIDADFqxmE9JWjlIddvqpGaF4LO8nO
hHCbX/BXMA0GCSqGSIb3DQEBCwUAA4IBAQAVkjGScxl0B1I1c+nITp8+m8rWPOW9
pCLRRGnFru7VFQHWv79sseK3ugVpydJDGRmUkgIfke0wlFXg4wxq56Pa71IGS1sB
keSlh7cCJYCP15Ip7iuLoK4DcgwbXPSM+7pga4ayYLR61OC1+tGjy0aHqylSQh/M
rhiVeaf12R/kay7ns+obKyGS6U7m4icJmha0aY54n9R+ni10yFmKL0yMX8N6ih+g
iiBN2OF9yNHrfUk0mEIUkExg3GjtjY+adnkL0UuIcWklFeTbqLNNq3zOLZ7vmudx
y+00Bki6wPtHZc6iS8rK8FHHF1F2TKxVm9J276gzQkm0XUjgCGlBV6Dv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352400250371222982231065448848841692422194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 09:03:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 09:03:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bishop.ccs.neu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720793567107404972505930015243959438793183612564426110507204196184104655249486028799711198235264006053119107067534507865124000845772703653806164886589269673914661285612125034611520571370267875985126019906798617082759570025459081853784619385043835571021321842614408589571134556264226694226475750389352861722653751807502485593709611529753272618042812928964069446762427479072694453458734262761431592153070546521234548979766351844868949023451536024749545014339315799264992146983693011519193840067181839443609340710246705013179974259466766075798967770376559687689588985779929238401455108782235389484846846421499695095424302680107013206209688357051853206240370404963560624284875626299762440989884821457181931936326373633290968090311979032143586895530870583142476019252202586967585648186725080416475264624776022851959201076044709937525850473784314308562473337986012048178934670996404081013889186764820403642179401026322970063619214371516199241408920468504413099976854753755080351121057756866001851979818673458758983367273079151487551020561674109105500602425047085194398024639171088862236317158092877321514389817861497409215035001370135996069028192006502894486690116707822521789494936817983142675195838877730224429093320977918850884931483219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d7171992b0e6c1ac1a0afcaa54c55fc8d0308d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bishop.ccs.neu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handins.ccs.neu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handins.khoury.northeastern.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189bad9f20c000004030046304402200564bb5f6d7f908da77279e31a37e4d96f111dd5b56f677646034d71497a5f1802200a6ec9c7fcdcc120985fe347c71398741eac070c44e63e70d001259a3620ceeb007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189bad9f1f90000040300473045022059fcb5960b857edc413b314c167cb650295e42b798204556f755dabb74fa35490221008c35e399080c00c5ab1984f495a394875dbeaa46685e0b3bc9ce84709b5ff057
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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