admin-dev.azure.bmw.cloud

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:29:14:a1:9d:57:1d:4b:13:87:7c:b0:e6:41:c5:9f was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=admin-dev.azure.bmw.cloud

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:29:14:a1:9d:57:1d:4b:13:87:7c:b0:e6:41:c5:9f
Serial Number (int): 18822494564809449405188568482737931679
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:de:b1:fa:39:cb:49:d1:83:f8:34:02:cf:51:31:ef:31:be:b7:ae
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): b8:44:f0:c2:6a:eb:c6:ac:52:25:5e:3b:22:10:83:b1:a6:30:2e:42
Fingerprint (sha256): 04:e0:9f:fd:b7:61:e7:56:0a:bc:14:6d:8e:b0:d5:ca:1b:03:2d:2e:60:b9:01:45:38:8f:97:9a:4a:70:73:63

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate admin-dev.azure.bmw.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin-dev.azure.bmw.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-dev.azure.bmw.cloud

Other certificates including the domain name bmw.cloud

(limited to 100 certificates)
drhub-i.aws.bmw.cloud
api.emea.deperso-dev.data.bmw.cloud
admin.smoss.apac.bmw.cloud
cdp.hst-dev.bmw.cloud
cdhxchrfederation-test-service.iam-oss.data.bmw.cloud
cdhxcoreexternal-authentication.iam-oss.data.bmw.cloud
cdhxlpaexternal-authentication.iam-oss.data.bmw.cloud
sf-mco.aws.bmw.cloud
resources-dev9.data.bmw.cloud
impxmv1.impact-connector-dev.data.bmw.cloud
api.loyalty-dev.my.bmw.cloud
cdhxdev14idp.iam-int.data.bmw.cloud
api.aiforeng.aws.bmw.cloud
b2cds-neo-storybook.int.b2cds.eu-central-1.aws.bmw.cloud
rvm-test.aws.bmw.cloud
api.rita-dev.azure.bmw.cloud
data-middleware.aws.bmw.cloud
cdhxlu2.api-dev.data.bmw.cloud
vehicle360-ext-int.aws.bmw.cloud
us-east-1.api-dev.data.bmw.cloud
graphql.orbit-selfservice-test.aws.bmw.cloud
qa-wcmp.wcp-int.bmw.cloud
establish.test.digital-trust.bmw.cloud
bmw-int1.com
ktd.aws.bmw.cloud
compare.int.stolo.eu-central-1.aws.bmw.cloud
ispi-dev.azure.bmw.cloud
b2b.prod.trainingsmedia.bmw.cloud
cdhxdev8authorization.iam-int.data.bmw.cloud
user-api.int.manage.aws.bmw.cloud
api.eu-central-1.playground.personalization.aws.bmw.cloud
authorization.fsspk2-iam.scratch.cdh-oss.bmw.cloud
dev2.lineage-dev.data.bmw.cloud
sql-dev9.data.bmw.cloud
engage-th-uat.apac.bmw.cloud
frontend-api.chengdu.manage.aws.bmw.cloud
cdhxkguquicksight-updater.iam-dev.data.bmw.cloud
config.bmw-default.us-east-1.evecs-tst.bmw.cloud
content-e2e.bch-ipa.aws.bmw.cloud
graph-dev7.data.bmw.cloud
dvs-css-frontend.st4.dvscss.eu-central-1.aws.bmw.cloud
cdhxkgu-gutherkfederation-test-service.iam-oss.data.bmw.cloud
fsspk1.fsspk1-api.scratch.cdh-oss.bmw.cloud
pr2quicksight-updater.iam-oss.data.bmw.cloud
lb.int.cosy.bmw.cloud
mini-next.configurator.bmw.cloud
mhx000metahub-config.metahub-dev.data.bmw.cloud
svmd.msdynamics.azure.bmw.cloud
crm-adapter.aws.bmw.cloud
api.blava-int.aws.bmw.cloud
dev3.ingest-dev.data.bmw.cloud
subscriptions-dev3.data.bmw.cloud
cdhxmorgraphql-api-dummy.iam-oss.data.bmw.cloud
bmw-int1.com
portal.nkam-sit.azure.bmw.cloud
rvm-int.aws.bmw.cloud
cdhxdev10idp.iam-int.data.bmw.cloud
openvidu.viper.bmw.cloud
demo.tst.us-east-1.cgpb-test.aws.bmw.cloud
dfms.bmwna-dealer-cms-reimagine-prod.us-east-1.aws.bmw.cloud
cdhxjr2.api-dev.data.bmw.cloud
media.assets.dev.nft.aws.bmw.cloud
cdhxcoreperformance-data.iam-oss.data.bmw.cloud
qa.mu.int.rossi-italy.bmw.cloud
configure.mini.com
cdhxdev3authentication.iam-int.data.bmw.cloud
pr0quicksight-assets.iam-oss.data.bmw.cloud
cdhxblsgraphql-api-dummy.iam-oss.data.bmw.cloud
admin-dev.azure.bmw.cloud
graph-dev13.data.bmw.cloud
pr1quicksight-updater.iam-oss.data.bmw.cloud
bmw-int1.com
api.smms.apac.bmw.cloud
portal.data.bmw.cloud
issue-func.test-lppackagingapproval.azure.bmw.cloud
bmw-int1.com
impxmat.impact-connector-dev.data.bmw.cloud
authentication.fssww1-iam.scratch.cdh-oss.bmw.cloud
italy.manage.aws.bmw.cloud
mybmwweb-app.e2e.mybmwweb.eu-central-1.aws.bmw.cloud
cdhxkguidp.iam-dev.data.bmw.cloud
api.manage.aws.bmw.cloud
prodlib-ev-aggregator-prod.prodlib-prod.aws.bmw.cloud
int.nbc.bmw.cloud
cdh-api.dev.simpledata.bmw.cloud
impxjro.impact-connector-dev.data.bmw.cloud
cdhx008.api-dev.data.bmw.cloud
server.ispi.azure.bmw.cloud
intranetkr-dev.aws.bmw.cloud
bmwgroupdesignworks.com
status.codecraft.bmw.cloud
bts-webshop-int.aws.bmw.cloud
stream.bmw-default.us-east-1.evecs-tst.bmw.cloud
api.smoss-qa.apac.bmw.cloud
cdhxdev13docs.iam-int.data.bmw.cloud
ccr-x-dev.aws.bmw.cloud
app.engage-my-uat.apac.bmw.cloud
quizit.azure.bmw.cloud
ingress-ex10.dev.cgpb-test.aws.bmw.cloud
us-east-1.api.core.data-int.bmw.cloud

Certificate

The complete raw certificate details for admin-dev.azure.bmw.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07k0q2qh7vfG3KGlawsa
tsirl8EqKfu4nHLG3vQ2UZUdItXPjVsBtW5pm9473Y/B5IuAbGw/jZQUQodIcAXj
8RdWXvI7ZrD8jN9lEakywyOOQ4GZbgvXxmjj15IYN2w30Q/9Z6VV0HL/z87NFQ9v
gVewDCkRDjewuJXMUFupuZoUxjn0slPePCjTWcxGkQO3rkzOAvL90fBvWib40KqD
+nUe5BtKttwAx0fIdQkrPqhQOyInq/caMQcFEO+hYh8KD7Gm9YMGxNRlqVFhP5x9
PsKB8mk7EFrDp0OZfQ5fqqcTKy4ZyZ2bOXR3HM71UWsh+u47rkTE5XWlkO0i7fNR
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18822494564809449405188568482737931679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin-dev.azure.bmw.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26727610702386920032078775950069895745225999796238889474305437340972496534368305181278079027716265935627199156220153317222927436320142398975693579859589439218216749165282764586484371740710984314521006567720807923086475830104531148587126263788606260250858785988213560046555944922736986147529613482527019998790193055496325223907198027530551600319678949803144421659904062076654977931317728445874420784016255316609304240601251652734507110047548992078577624608564407697249232464054803210065145716549892810696456301935183245509756567494969279920875472083205081477879630064745675066798371795735886044548814532370223345127901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84deb1fa39cb49d183f83402cf5131ef31beb7ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-dev.azure.bmw.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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