nh-data.sony.co.jp

- Sony Global Solutions Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:3c:47:ad:ce:9f:11:ae:13:6b:bb:aa:7c:df:b3:e6 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Global Solutions Inc.

Organization: Sony Global Solutions Inc.
State / Province: Tokyo
Locality: Minato-ku
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:3c:47:ad:ce:9f:11:ae:13:6b:bb:aa:7c:df:b3:e6
Serial Number (int): 10946815599291605597151696455597011942
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d9:61:4c:5d:f7:5f:69:26:f3:45:f8:12:96:74:23:0d:b9:75:44:d4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 99:2f:ac:23:c7:6b:37:46:0c:58:37:47:4d:de:9c:90:53:66:82:0a
Fingerprint (sha256): 07:84:00:11:5e:97:99:2d:13:25:28:47:60:20:de:49:aa:a8:90:6c:4f:b9:5c:a8:49:4c:e7:79:1a:e9:96:fd

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate nh-data.sony.co.jp

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nh-data.sony.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nh-data.sony.co.jp
sony.co.jp
sony.net
sony.com
aws-nh-data.sony.co.jp
nh-pv.sony.co.jp

Other certificates including the domain name sony.co.jp

(limited to 100 certificates)
medlab.csl.sony.co.jp
incapsula.com
life-space-ux-lab.sony.co.jp
incapsula.com
www.sony.net
www.posweb.sony.co.jp
www.sony.net
*.inazuma.sony.co.jp
incapsula.com
life-space-ux-lab.sony.co.jp
imperva.com
dts-prod-01.raynos.sony.co.jp
www.sony.net
www.sony.net
*.misty.sdna.sony.co.jp
*.csl.sony.co.jp
www.unity.scee.net
regist-hub.d-imaging.sony.co.jp
incapsula.com
www.sony.net
cas-portal-prod01.scas.sony.co.jp
ulmsdev.d-imaging.sony.co.jp
www.unity.scee.net
mysup.ulmsdev.d-imaging.sony.co.jp
dts01.raynos.sony.co.jp
*.inazuma.sony.co.jp
leasecenter.sfil.sony.co.jp
leasecenter.sfil.sony.co.jp
www.pin.sony.co.jp
support.d-imaging.sony.co.jp
www.sony.net
www.sony.net
nh-data.sony.co.jp
*.inazuma.sony.co.jp
cas-ldap04.scas.sony.co.jp
vaio-update.vaio.sony.co.jp
cas-web02.scas.sony.co.jp
control.d-imaging.sony.co.jp
*.inazuma.sony.co.jp
medlab.csl.sony.co.jp
www.point.sony.co.jp
www.sony.net
shqcms.bk.sony.co.jp
incapsula.com
www.newgrads.sony.co.jp
support.vaio.sony.co.jp
*.inazuma.sony.co.jp
*.inazuma.sony.co.jp
sso.scas.sony.co.jp
support.d-imaging.sony.co.jp
www.wms.sony.co.jp
api.score.sony.co.jp
mep.csl.sony.co.jp
incapsula.com
www.score.sony.co.jp
dsc1-portal.d-imaging.sony.co.jp
pstngw02.sonynetworkcomm-intra.sony.co.jp
www.gpcareers.sony.co.jp
cas-vm-ldap-u01.scas.sony.co.jp
*.d-imaging.sony.co.jp
*.inazuma.sony.co.jp
medlab.csl.sony.co.jp
medlab.csl.sony.co.jp
js.raynos.sony.co.jp
sso.scas.sony.co.jp
www17.scas.sony.co.jp
www.logplat.sony.co.jp
incapsula.com
expway-e3.com.sony.co.jp
incapsula.com
auth-qa.hibiki-support.sony.co.jp
support.d-imaging.sony.co.jp
sg-pkiweb02.pki.sony.co.jp
b2bgateway.extra-ajdc.sony.co.jp
www.sony.net
ulmsdev.d-imaging.sony.co.jp
*.d-imaging.sony.co.jp
mep-eu.csl.sony.co.jp
cas-web-uat02.scas.sony.co.jp
www.sony.net
www.cacao.sony.co.jp
soap-dev.hibiki-support.sony.co.jp
ulmsdev.d-imaging.sony.co.jp
nh-data.sony.co.jp
www.recruit.sony.co.jp
ulmsdev.d-imaging.sony.co.jp
reonconnect.sony.co.jp
cas-web04.scas.sony.co.jp
life-space-ux-lab.sony.co.jp
incapsula.com
cas-portal.scas.sony.co.jp
mep.csl.sony.co.jp
www.crs.sony.co.jp
apiqa.score.sony.co.jp
www.pin.sony.co.jp
support.vaio.sony.co.jp
www11.scas.sony.co.jp
qau01-jdc.speak-unicorn.sony.co.jp
support.d-imaging.sony.co.jp
mysup.ulmsdev.d-imaging.sony.co.jp

Certificate

The complete raw certificate details for nh-data.sony.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPNhEv8NqaItvWMN9frg
0Xerc25w2rPpYVh7sFrpEnI52Qc5/OQWdH5VeH+xZNV+BoU0nDzWNolFiC/InHEA
3t6jLkoOBowiuxjRPQCtucExPTMA3VZnJnLbLUOiTN3BQeKlmJQStAodTdrkcULp
efUaG2MMn53N3Th1GibDMu3ugE8VgjEqOvWps6x3LvzF1dnfIuk43E1kczhThxo9
8J4aU2vaNO6EQmwlUjKZ26LmWZNThS8I16/GxbB7G38nAeXs4GXuQK2JCkjTf6rv
kpLGUYabzZEDyEzzYZsZka+TkR7gRQPLgm3E2HOYKUGQlfnH75z1I4nNc/BOrwn8
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10946815599291605597151696455597011942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Global Solutions Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nh-data.sony.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22337956428639599355897707906846039003969614030343521404031366218254569612618891381446058606292157682091434240920730279812356747999837702260737463585727993167214134747581293807374841565704225244856822405969607205422805893595733603272860840419220886797140357724064802222653245860818340580470510039124093059679984345086589758916059614009216245308586863517764446619529596916794242168249984919299868038136012389020441958344030339090728454867633351943761836021681298199543080331345582987620185570640039359128090528308263942916840436337636965922312977219504010923757451591709172510750736389184911834898662458290949675678859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9614c5df75f6926f345f8129674230db97544d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nh-data.sony.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-nh-data.sony.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nh-pv.sony.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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