*.legis.state.pa.us

- PA Legislative Data Processing Center -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:2e:dc:da:14:42:b9:01:0a:eb:7d:28:11:d1:27:e8 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PA Legislative Data Processing Center

Organization: PA Legislative Data Processing Center
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:2e:dc:da:14:42:b9:01:0a:eb:7d:28:11:d1:27:e8
Serial Number (int): 18852517004604018726238967491990726632
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 17:ba:ab:ba:ff:2d:f2:20:97:ea:04:d7:10:29:c0:17:ab:7d:07:7c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 8a:c6:6c:93:31:4b:7d:77:1d:98:b0:5c:31:ce:ca:a5:ec:28:0a:44
Fingerprint (sha256): 09:04:21:b4:18:61:df:5d:7c:e4:06:ec:3b:1a:ea:eb:c0:76:bc:32:09:ed:1b:53:2b:37:4d:ab:8e:e9:a3:eb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.legis.state.pa.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.legis.state.pa.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.legis.state.pa.us
legis.state.pa.us

Other certificates including the domain name state.pa.us

(limited to 100 certificates)
www.pasuppliersrm2.beta.state.pa.us
dliftpua.state.pa.us
www.puc.state.pa.us
uat.calcrite.cor.state.pa.us
www.dotdom3.state.pa.us
secure.courts.state.pa.us
mapir.dpw.state.pa.us
www.stebapp.state.pa.us
pa.direct.file.state.pa.us
www.dot14.state.pa.us
www.dotdom3.state.pa.us
www.state.pa.us
www.leadstracking.dced.state.pa.us
awds.beta.psp.state.pa.us
padlsonline.pa.gov
www.hspaymentgateway.state.pa.us
ldap-mo.dpw.state.pa.us
intraapps-r.dpw.state.pa.us
www.papsrs.state.pa.us
www.pspleot.state.pa.us
www.nedss.state.pa.us
www.aopc.jnet.state.pa.us
ESECagSANCertSyst.dot.pa.gov
apps02.ins.state.pa.us
www.dossurvey.state.pa.us
www.doreservices.state.pa.us
www.jobgatewaytr.pa.gov
lms.state.pa.us
missl.dhs.state.pa.us
www.puc.state.pa.us
www.pasuppliersrm.state.pa.us
www.papsrs.state.pa.us
dliftpua.state.pa.us
www.fd.state.pa.us
tacs.state.pa.us
www.icopapki.state.pa.us
www.JobGatewayrpt.state.pa.us
www.hava.state.pa.us
www.vplan.state.pa.us
www.mpoetc.state.pa.us
www.agtrans.pa.gov
www.agtrans.state.pa.us
pdxs-sat.dpw.state.pa.us
www.humanservices-t.state.pa.us
provider.enrollment.dpw.state.pa.us
www.pimsreports.state.pa.us
www.dot12.state.pa.us
www.nedss.state.pa.us
www.fwgs.beta.state.pa.us
www.pgcb.state.pa.us
www.gis.dcnr.beta.state.pa.us
www.oit.state.pa.us
www.tcs.ed.state.pa.us
www.PAFoodSafety.pa.gov
www.pelican.state.pa.us
www.boardofappeals.state.pa.us
rtm.clean.beta.state.pa.us
www.dot2.state.pa.us
www.handsstaging.state.pa.us
www.nedsstest.state.pa.us
www.pasuppliersrm.state.pa.us
www.hhsapps.state.pa.us
dot11.state.pa.us
www.dpwtxns.state.pa.us
www.nedss.state.pa.us
bdap.health.state.pa.us
www.dot16.pa.gov
WWW.PEMAWEBTOOLS.STATE.PA.US
www.helpinpa.state.pa.us
pew.dpw.state.pa.us
www.depgis.state.pa.us
www.avl.state.pa.us
www.pema.state.pa.us
*.lgc.state.pa.us
www.pennfirs.state.pa.us
www.paltcreporting.state.pa.us
www.dottrn34.state.pa.us
qars.penndot.gov
ESECagSANCertSyst.dot.pa.gov
www.pennfirs.state.pa.us
RSA1.legis.state.pa.us
www.hhsidm-sat.state.pa.us
www.grants.dcnr.state.pa.us
www.cwdsua.pa.gov
www.services.dcnr.state.pa.us
www.paemployee.lottery.state.pa.us
www.dotdev12.state.pa.us
pew.dpw.state.pa.us
www.cwdsua.pa.gov
www.humanservices-t.state.pa.us
*.legis.state.pa.us
ldap-uat.dpw.state.pa.us
www.purta.state.pa.us
www.fctms.state.pa.us
dliiamtr.state.pa.us
imaging.dpw.state.pa.us
www.pdotdev1.state.pa.us
store.cpc.state.pa.us
www.rbauth-s.state.pa.us
www.portal.state.pa.us

Certificate

The complete raw certificate details for *.legis.state.pa.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXHgPpv8v1u7hlx4iXTr
FlDSeDsis4N3/L0me0z00MSmHd15N2BNC6Bidj4MNJ+tjHHfftb5pfAeWhPpcnmy
Il1xxMMIrj20gU7FST+mBmEevAF/sB7FaToxftaQNBfkbUWYRoR2wpq7zQmDb2QY
OHAZLpgphkyilf1oMeg16oadgN9EaWpazFOXR834xbi4pTtPRwy6FiJaCN3egO9B
gjx7h3C2E/Gus7ubm7fAUTnYtwrG2830Ngwpxv7RJcZTUCgBFumVZqHHuyEj21kg
z8pYqkQV5DvlKciUgYrDYSRvRXi9LHjo8OejYBFOrE+v/vR10JI3rTeuT5U9eaPM
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18852517004604018726238967491990726632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PA Legislative Data Processing Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.legis.state.pa.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21390427865743697871729498628005155919866826789838414009490824029982152055248507753389734624354950583510919887723855709296954894497885996309674786123322424823200232219588551792656710735552003949213931784806468797711282605250483800312689242122007442953221796810553809810789965615284686028285712721056598373200042287340841302573274623517871701611231710799108977221054778454069057342999850247923611465276044139650403054451860419826354778386748448494655628663138019151371901773686284676617716517412130496177903496702294442523138534536224213330016024890055329559004176749597850077956807743294082354197632968733367428434977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17baabbaff2df22097ea04d71029c017ab7d077c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legis.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legis.state.pa.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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