hermes.gwu.edu

- The George Washington University -

Issued by InCommon Server CA

About this certificate

This digital certificate with serial number 18:4a:a2:b3:93:91:86:3f:d8:40:02:51:5d:30:d2:da was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The George Washington University

Organization: The George Washington University
Organization unit: IT
Address: 44983 Knoll Square
Postal code: 20147
State / Province: VA
Locality: Ashburn
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:4a:a2:b3:93:91:86:3f:d8:40:02:51:5d:30:d2:da
Serial Number (int): 32289001844236664480545619642382602970
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 74:cb:90:64:24:3e:53:8c:58:b6:ce:bd:c1:f3:0f:3b:8f:62:72:cf
AuthorityKeyId: 48:4f:5a:fa:2f:4a:9a:5e:e0:50:f3:6b:7b:55:a5:de:f5:be:34:5d

Fingerprint (sha1): 36:42:90:67:a0:5f:c2:a7:67:85:ca:ce:89:83:67:8f:93:0d:c9:a0
Fingerprint (sha256): 05:f4:83:d4:da:0d:cb:d6:48:f9:6b:53:e4:e7:85:1d:22:3f:a2:d0:77:2b:b5:47:8b:27:48:ee:78:7e:ed:f1

Issuing Certificate URL: http://cert.incommon.org/InCommonServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon.org
CRL Distribution Point: http://crl.incommon.org/InCommonServerCA.crl

Check the revocation status for certificate hermes.gwu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hermes.gwu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hermes.gwu.edu

Other certificates including the domain name gwu.edu

(limited to 100 certificates)
keystone.it.gwu.edu
webrequest.gwu.edu
progressreport.publichealth.gwu.edu
it.uahs.arizona.edu
secure.mdl.io
fb-webexhybrid-c.uc.gwu.edu
identity.gwu.edu
5679413765079040-fe4.pantheonsite.io
linc.seas.gwu.edu
sni.cloudflaressl.com
assets.library.gwu.edu
secure.mdl.io
guides.himmelfarb.gwu.edu
uconnectlabs.com
banweb.gwu.edu
ode.hr.gwu.edu
sonxr1.erp.gwu.edu
hcsi.seas.gwu.edu
ipcc.seas.gwu.edu
www.design-engineering.princeton.edu
uconnectlabs.com
bigdata.seas.gwu.edu
5650817738604544-fe4.pantheonsite.io
5649202965118976-fe1.pantheonsite.io
biostatcenter.gwu.edu
www.hcii.cs.cmu.edu
dataprograms.gwu.edu
landing.healthsciencesprograms.online.gwu.edu
securetransfer.gwu.edu
208.lsnc.net
sni.cloudflaressl.com
www.blogs.earthjustice.org
useastucc5.acquia.com
hsrc.himmelfarb.gwu.edu
hsrc.himmelfarb.gwu.edu
careerconnect.gwu.edu
healthsciencesprograms.online.gwu.edu
linc.seas.gwu.edu
hermes.gwu.edu
webdev.colorado.edu
virtual2.unlv.edu
dar.connect.gwu.edu
*.mfa.gwu.edu
sa.gwu.edu
ieres.elliott.gwu.edu
getinfo.gspm.gwu.edu
tftcav.seas.gwu.edu
natsecuritymedia.gwu.edu
test-admin.gworld.gwu.edu
jacob.law.gwu.edu
*.publichealthonline.gwu.edu
5679413765079040-fe4.pantheonsite.io
servicedesk.kerrylogistics.com
efc.gwu.edu
uconnectlabs.com
servicedesk.kerrylogistics.com
scholarship.law.gwu.edu
dit-sebmsfb-p01.ead.gwu.edu
scholarship.law.gwu.edu
hub.meed.com
amer-san1.blackboard.com
208.lsnc.net
uconnectlabs.com
www.cspri.seas.gwu.edu
webrequest.gwu.edu
services.gworld.gwu.edu
archivesspace.library.gwu.edu
dev.wellness.yale.edu
5679413765079040-fe4.pantheonsite.io
onlineemse.seas.gwu.edu
oak.itl.gwu.edu
uconnectlabs.com
els.at.gwu.edu
sni.cloudflaressl.com
5650817738604544-fe4.pantheonsite.io
*.mfa.gwu.edu
sa.gwu.edu
dnp2019.columbian.gwu.edu
live.ucdavis.edu
info-dev.calperformances.org
*.publichealthonline.gwu.edu
bmeday.seas.gwu.edu
secure.mdl.io
sorger.seas.gwu.edu
www.cesun2016.seas.gwu.edu
good.gsm.cornell.edu
fb-webexhybrid-c.uc.gwu.edu
hpcat.seas.gwu.edu
business.gwu.edu
eagle.phys.gwu.edu
scom.it.gwu.edu
uwspoctmct1.es.gwu.edu
kbox.seas.gwu.edu
hermes.gwu.edu
landing.gsehd.gwu.edu
servicedesk.kerrylogistics.com
*.elliott.gwu.edu
gwoffice.it.gwu.edu
liberalarts.ss.pacific.edu
aws2.web.cloud.ccas.gwu.edu

Certificate

The complete raw certificate details for hermes.gwu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iH97Eo0fHtMzffXG464
uuPHPdViod+ynKJHhdNpUzreJviB4LQ/T8l5XkCoTvwiLwjSPBy9cKhbEiw2zK/T
AhxruYy8lHXsd/qK4XPUxvoXNEomT36FQakjALQRsMaLWpxXCWfSaLNVjgoePjqb
GZXdP0n9JkgCpVMBzltB04XI5OZEjxCmaPdvM8Q0JXWbbEqhuYoL3z8Tz8d0e81F
hGIYVGGwST+uigarn/p6y4XLl4YU3rm8Yu80C4dB3aI8hB4fNBLeiDTWyxhCjihP
uT9TfdfbZczg8hEypEkDbRZxLG7XMHqhtMSZGnXpQu2ZTh7kJ0L//UIrTookQNmg
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32289001844236664480545619642382602970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '20147'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ashburn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '44983 Knoll Square'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The George Washington University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hermes.gwu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28546618946413477530509673230886627286988210662134837236040813383249532982334401861148361851972348571527821876030046124332035381714973790067318654517243301859562018789708250991591074279980842562076179301720158826572062712979927527327813999460426405587120124999849338095400211437880091883240108484530971171193947219821855383071490339145011555126561437371389234929969708754921757060508702983780948336354751940844504290297766422317456046600442600379670160604975706920092186661535462758366078131239604626663163093596734207357304274438632704029582409917193274523465465499704479444862029485323101527807165157283016035901489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 484f5afa2f4a9a5ee050f36b7b55a5def5be345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74cb9064243e538c58b6cebdc1f30f3b8f6272cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon.org/InCommonServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon.org/InCommonServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermes.gwu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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