ask.jimu.kyushu-u.ac.jp

- Kyushu University -

Issued by NII Open Domain CA - G7 RSA

About this certificate

This digital certificate with serial number 03:c0:83:7f:07:2d:ca:d1:32:6e:0c:ba:47:3c:37:31 was issued on by SECOM Trust Systems CO.,LTD..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Kyushu University

Organization: Kyushu University
State / Province: Fukuoka
Locality: Fukuoka-shi
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c0:83:7f:07:2d:ca:d1:32:6e:0c:ba:47:3c:37:31
Serial Number (int): 4987272044049906711450668757149300529
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 05:86:68:c3:19:5f:7c:69:0a:84:84:a6:13:ec:d8:53:9f:55:b5:a2
AuthorityKeyId: b0:2e:e5:51:ed:fc:4a:cf:a3:87:f1:13:90:76:2d:9d:8e:94:a1:e3

Fingerprint (sha1): 14:d4:86:b8:34:20:50:95:77:5e:c0:f8:01:ad:41:df:10:2e:3f:0d
Fingerprint (sha256): 06:67:7b:47:5a:55:b6:d7:57:bc:96:9d:fa:1f:81:d0:dc:a7:ab:cc:ab:2d:24:1a:ac:f8:16:cb:f6:62:f7:17

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer

Revocation information

OCSP Server: http://niig7rsa.ocsp.secom-cert.jp
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl

Check the revocation status for certificate ask.jimu.kyushu-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ask.jimu.kyushu-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ask.jimu.kyushu-u.ac.jp

Other certificates including the domain name kyushu-u.ac.jp

(limited to 100 certificates)
m602.m.kyushu-u.ac.jp
eq.kyushu-u.ac.jp
www.hes.kyushu-u.ac.jp
webmail.math.kyushu-u.ac.jp
hosting3.cc.kyushu-u.ac.jp
storage.iii.kyushu-u.ac.jp
mol.artsci.kyushu-u.ac.jp
konchudb.agr.agr.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
*.qc.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
beppu.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
app.icer.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
mpoint.cc.kyushu-u.ac.jp
www.icer.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
ku-portal.kyushu-u.ac.jp
message.iii.kyushu-u.ac.jp
storage.design.kyushu-u.ac.jp
okadalab.kyushu-u.ac.jp
career.kyushu-u.ac.jp
jinq-web.jimu.kyushu-u.ac.jp
www-shiken.jimu.kyushu-u.ac.jp
xserve.rche.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www3.ir.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
ir-bi2.jimu.kyushu-u.ac.jp
ns1.edu.kyushu-u.ac.jp
hosting2.cc.kyushu-u.ac.jp
scmain.sc.kyushu-u.ac.jp
pops.dent.kyushu-u.ac.jp
hyoka.ofc.kyushu-u.ac.jp
setting.m.kyushu-u.ac.jp
www.share.kyushu-u.ac.jp
card.kyushu-u.ac.jp
syllabus.kyushu-u.ac.jp
portal.i3.kyushu-u.ac.jp
hosting4.cc.kyushu-u.ac.jp
sub.et.kyushu-u.ac.jp
auth.icer.kyushu-u.ac.jp
otrx.ed.kyushu-u.ac.jp
ask.jimu.kyushu-u.ac.jp
job.jimu.kyushu-u.ac.jp
sevo.kyushu-u.ac.jp
www.rheumatology.beppu.hosp.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
fs1.edu.kyushu-u.ac.jp
scserv.sc.kyushu-u.ac.jp
rengeso.edu.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
zk1.med.kyushu-u.ac.jp
vpn.jimu.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
office365.iii.kyushu-u.ac.jp
ueii.kyushu-u.ac.jp
webmail.dent.kyushu-u.ac.jp
yin.cc.kyushu-u.ac.jp
koyukai.kyushu-u.ac.jp
*.math.kyushu-u.ac.jp
ku-cert.kyushu-u.ac.jp
ccl.scc.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www.artsci.kyushu-u.ac.jp
sw-web.cc.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
www.sec.kyushu-u.ac.jp
tutor.isc.kyushu-u.ac.jp
*.imi.kyushu-u.ac.jp
nursing.career.center.med.kyushu-u.ac.jp
medtechs.med.kyushu-u.ac.jp
cs.kyushu-u.ac.jp
gcity4.doc.kyushu-u.ac.jp
gp-card.kyushu-u.ac.jp
imaq2.kyushu-u.ac.jp
qenavi.eng.kyushu-u.ac.jp
ds.s.kyushu-u.ac.jp
web.sso.kyushu-u.ac.jp
wocmn1.gened.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
rad.dent.kyushu-u.ac.jp
kokusai.hosp.kyushu-u.ac.jp
isc.kyushu-u.ac.jp
dreams-d1.riam.kyushu-u.ac.jp
portal.isee.kyushu-u.ac.jp
soft.iii.kyushu-u.ac.jp
qpost.jimu.kyushu-u.ac.jp
aero.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
goukaku.jimu.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
hosting1.cc.kyushu-u.ac.jp
ud.arch.kyushu-u.ac.jp
www.m.ait.kyushu-u.ac.jp
www.lib.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
portal.hq.kyushu-u.ac.jp

Certificate

The complete raw certificate details for ask.jimu.kyushu-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyysC6W6HUnKlNEe8maq4
9PbVTZaMut/eXX/FuanZip1kXqnQ1Ix93OroxC/TuWkioof2h+XDEFJde5DDAPV5
rHucf1j3WxVWvbGHi+gKBtl/7rVPy6VgARWHll2r5mcQvvHcTeTWiFrfTyFgNVCT
mB0CMREJSuSM6gDY9of4lUH7NKxtHMlvWXXMD3ekOFRvLKuzujnck2qrtlWGlc36
4Xg7Iz7jLl6kQb0/PahW8BlRF4J7koW6pdBYY9UTqOFlftImRIHNJ/fc9nuqd454
jR26YQoutSlUqkXtPrrqzTRjgDw8KIVAHaek2qBoVQACeMnFLFA/UcKUHs3BcowE
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4987272044049906711450668757149300529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G7 RSA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 23:58:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-07 23:58:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyushu University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ask.jimu.kyushu-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25647585607315887548154915522187681416717060096083837172705628551711335467733351802890917013735406350642983327713150269219176227876930709226151384062899167372270485099905154684780542539216832517502042115794695674257819489303321194034852946848233952304508977778256116665761902946495408299985741415583158220427599178121783453591331186462400068683607230607221692104318703786821235556169176453194929830074333173403513105579712669454828125038932652547422668562451057292575909148589707084159348671188951949974364632206588185226033769582310718135758866046780416110042297355067401910123878990481522970604711231411115363402907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b02ee551edfc4acfa387f11390762d9d8e94a1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig7rsa.ocsp.secom-cert.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.jimu.kyushu-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							058668c3195f7c690a8484a613ecd8539f55b5a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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