dia-2018.aau.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:fc:80:a7:0f:ae:6a:2d:88:c4:b7:c5:91:fa:fd:8d:93:54 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dia-2018.aau.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fc:80:a7:0f:ae:6a:2d:88:c4:b7:c5:91:fa:fd:8d:93:54
Serial Number (int): 434371308806208028718042292975127562654548
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:30:b4:82:ec:87:c5:65:8c:6d:eb:1c:cb:b4:f8:3c:db:fb:63:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:da:a8:37:38:dc:49:bf:e6:4f:3e:43:75:95:e9:d2:a2:5b:32:57
Fingerprint (sha256): 07:46:ea:18:96:73:e3:46:6c:6f:91:59:90:47:45:f6:47:ac:13:70:76:44:2a:04:07:99:5d:36:5d:94:75:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dia-2018.aau.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dia-2018.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dia-2018.aau.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at
vcs-isbi.aau.at

Certificate

The complete raw certificate details for dia-2018.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISBPyApw+uai2IxLfFkfr9jZNUMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDgwNDQ3MjFaFw0x
OTEyMDcwNDQ3MjFaMBoxGDAWBgNVBAMTD2RpYS0yMDE4LmFhdS5hdDCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBANfR8UhYsndhYTq5U7Yd4QklcSownmLF
0+xtb1qCagW72hwg2/IOTsQB+RcULqFCch/jKJV8302ZmsLa/UKUkGNv3vqIc5il
BDEGAYr6whfAtO7O8OYy2sblshdc5SIX4IJNVjiBJGoNOSYR25byxAqEhxNWt9TO
MNt9sKp63AKeeTG7VQeStavB4JttB/fgp1mzmIvnB/R6Je1i2xTyk09NLsdMOSBM
3lWv0sEIRQ+F8NYmxxMmzyWIBByiztCuoYDlqtG80jx2RUiVLyctDaD+IqwXxOIo
2m6i1FwDJIxEyFfS6pc1cluZPUbb3QKGs9ToDcLLo5ADuX7AAJFxSETyzUR831Xn
5TyioahJVonlR27cxucGtZIHmHrnq6pbyEjFk8sj3nmEvcViYVPXOrQDNHpetqo+
D03Nh9Kqh4qdbzoOleujyb1mIFrOBj6uehY5a4Gb2+zom/wZW+C8l65SohdKvwb5
BWBaZlSS/t+C67ks5vc71/R/zu3nWU+nXbH3uh3RGPO6wq7cTlyn481qtSq3ta+g
105vrPfyo0elzuIGqmeEIjBRN9xoXeECj8TbSPsKdadO/KiWn6VVnufv5GmRbXzp
/fNYnlWwXCg7/2c6yZXHeRVVlUaUq6IjI0LLUMP8hIG0JHptgG9pUu9dJ56Wu8yH
01GT88XddBv1AgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIUw
tILsh8VljG3rHMu0+Dzb+2OSMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPZGlhLTIwMTguYWF1LmF0
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFtD2mW
iQAABAMARzBFAiB+bJEbxtFjQjsUDDPC/hGebzEHfxPyIqyo3MWXth1DagIhAIzL
npnMhniGTbx9YWq61fB54wPzRVAp0iS9W1/1VavOAHYAY/Lbzeg7zCzPC3KEJ1dr
M6SNYXePvXWmOLHHaFRL2I0AAAFtD2mWigAABAMARzBFAiBffYdrceoCin1kk6+s
LVfln377VdXj8S0AmrATFejfagIhAORF7Fb4KhFqHRbNEhzN/MFWoJQBOQ/9NcBm
evyhWDOkMA0GCSqGSIb3DQEBCwUAA4IBAQAODXcaR4X8adpezd8x6QCVBB7aUbcP
GV+l/j2b7d91Psk1UsATPvWuf8rpupCWzcknGg1v8il/Z1D5JP852A4wj7cKxpxW
ujwUofXWeprPXc1XjetIzLvUj5arAJV3ySJ7T6BsBds6+yVJeIsHkJN2jwnRhkrf
/n4DQkBaNu5vJ5PfMpud4+zD3iLgEo48xiqBXGAOPbDNjIfagGGi8yTVox5QwH4T
i1GDJ9Cpja5RHC2pVF7d4ADwQ3k5a0Bl1/VDH1HzUUspHwwrZee1vuHhsMnTt6jk
xP7SSW+quv+VX0QteYW5EaBPoFx8nn73VS8ZjylI6dJbkagY9T+S8Y8v
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434371308806208028718042292975127562654548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-08 04:47:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 04:47:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dia-2018.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880469141484634161510852802600818992419265326502220892829189866243785832678191722849813327160624530858572991695538616271129652972814048938862858948372173309572451867631043728644768645892265138704456063261593074965744518180212331322880546639085064010167646964359956681815752060317072951677037166107443674917531119950322891637865441005855867398030759467922880023572807123270263281309643439939936697513829584620863371797755070080217910427661039565292865725228344474399495503093325584771431091232284274198475404563154064379187803639709335400335974321540724794157725069414071868301667173232674481130469193353665455204038596114310932921383095837903310527559314906980807957591875340679520007915246472106582570646799510843000596686122351593035237506086130581710872111068573650388058528612878735475859255691779191349054560440534368848501142984243137966459312460001558307596949714168302058276941579178779665235840286311095131354523333744420557170540270060295626840483366230594984032310322508622607001082038914992046356067958298510453796896425979646679770959491738958006312729926868816768563363085316952920766731840707185062708619779774193892592798003990354106298228004073582183162676506147735064983370451865470934842891382751091405183436200949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8530b482ec87c5658c6deb1ccbb4f83cdbfb6392
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dia-2018.aau.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d0f699689000004030047304502207e6c911bc6d163423b140c33c2fe119e6f31077f13f222aca8dcc597b61d436a0221008ccb9e99cc8678864dbc7d616abad5f079e303f3455029d224bd5b5ff555abce00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d0f69968a000004030047304502205f7d876b71ea028a7d6493afac2d57e59f7efb55d5e3f12d009ab01315e8df6a022100e445ec56f82a116a1d16cd121ccdfcc156a09401390ffd35c0667afca15833a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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