systime.dk

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:99:d9:4c:8d:ec:09:06:0f:84:9d:87:74:c5:01:07 was issued on by Amazon.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=systime.dk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:99:d9:4c:8d:ec:09:06:0f:84:9d:87:74:c5:01:07
Serial Number (int): 16749564716921898089918213581693059335
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 94:31:20:07:74:d8:eb:33:6f:45:bd:b1:b0:af:70:f3:0e:fb:dd:51
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2a:e1:a2:71:11:59:39:9d:5a:aa:65:75:ee:31:a1:6f:2b:5b:be:d4
Fingerprint (sha256): 0b:92:ce:e0:5c:f4:e3:7f:71:25:78:64:f4:53:df:a6:97:16:fb:0f:a4:d5:3d:73:52:75:67:cb:0f:24:a1:9e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate systime.dk

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for systime.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

systime.dk
filo.dk
*.ibog.turteori.dk
*.filo.systime.dk
*.systime.dk
*.hr.edupub.dk
*.ibog.gyldendal.dk
*.devel.systime.dk
*.filo.dk
*.ibog.dk
*.vefbok.idnu.is
*.digi.munksgaard.dk
*.bok.xn--lastskringsboken-znb.se
*.ibog.dansklf.dk
bok.xn--lastskringsboken-znb.se
*.ibog.forlagetcolumbus.dk
*.demo.systime.dk
systimes.dk
read.cargosecuring.org
*.udgii.dk
ibog.dk
*.mg.edupub.dk
*.ibog.steno.dk
*.ibog.nucleus.dk
*.nam.systime.dk
*.edupub.dk
*.external.systime.dk
*.digi.hansreitzel.dk
*.sbok.nam.fo

Other certificates including the domain name systime.dk

(limited to 100 certificates)
standards-tools-status.ieee.org
systime.dk
systime.dk
systime.dk
itstatus.honegger.ch
shop.systime.dk
filo.dk
*.systime.dk
systime.dk
systime.dk
itstatus.honegger.ch
status.bigpicture.one
systime.dk
itstatus.honegger.ch
status.cayuse.com
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
itstatus.honegger.ch
shop.systime.dk
assets.systime.dk
systime.dk
shop.systime.dk
*.systime.dk
assets.systime.dk
rds.systime.dk
assets.systime.dk
itstatus.honegger.ch
*.services.systime.dk
*.api.systime.dk
systime.dk
*.systime.dk
itstatus.honegger.ch
status.cayuse.com
buildkitestatus.com
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
filo.dk
systime.dk
itstatus.honegger.ch
assets.systime.dk
itstatus.honegger.ch
*.systime.dk
systime.dk
*.systime.dk
systime.dk
*.systime.dk
systime.dk
ma.systime.dk
systime.dk
systime.dk
status.blakeschool.org
*.systime.dk
itstatus.honegger.ch
*.systime.dk
systime.dk
systime.dk
itstatus.honegger.ch
status.blakeschool.org
filo.dk
*.systime.dk
filo.dk
buildkitestatus.com
filo.dk
itstatus.honegger.ch
systime.dk
systime.dk
*.services.systime.dk
*.systime.dk
systime.dk
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
rds.systime.dk
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
*.systime.dk
assets.systime.dk
*.systime.dk
itstatus.honegger.ch
itstatus.honegger.ch
status.blakeschool.org
*.systime.dk
systime.dk
*.systime.dk
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
systime.dk
*.systime.dk
*.systime.dk
systime.dk
systime.dk
*.systime.dk

Certificate

The complete raw certificate details for systime.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj1QdzrC+2AEkGBexL5a
TU+kiPlMhyvXh8TP5BsLLr1eH+4NKpIHEscM1lbSmvyEonZNAPwNDe2ldD+wRfGx
59GbxuSnbeTZ41/pgN0u+uY+cSoyn8GRywdpMb6dWd5BY1kOPWkp8Tm/8fesbMfM
NzdPDWXIPjmK9eysA0rJaHjEX6r2vqeiNSt46h1cPeLABeXaQcck+U5utmqrz+9d
E7lyV61WDQlWSERmmKZycaXPaW+BXjiD8wQLgPnc+zNZW2ksIjczQa+9FKU+8ZMv
OyUIoPLOL4qo25z/rbnZwVZQri9kh2A0eP50NQh8oJKpRpAsgMjUxNlfJ2e/0nKA
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16749564716921898089918213581693059335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'systime.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26035326040736097166206451722053658626564774685020562573085912291474845166125715572625832153582055229766623907981824820554882644339683792342635795754103835381841000359326534618998900916681480251634018087120049663786536833479519425150812198923466306949036455804804762316772890578802537865145588349779784852224362833535517476215646775839318761010471775897982565928619538912010254082825808170014493898745321469761139357579904993905138242021706080215093391235028766992364065399912540211857769601563123670245160464060285111360021933855893259607465531369082694148203563795879754141701642764921382073982264681000779746803761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9431200774d8eb336f45bdb1b0af70f30efbdd51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (533 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filo.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.turteori.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filo.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hr.edupub.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.gyldendal.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devel.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filo.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vefbok.idnu.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digi.munksgaard.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bok.xn--lastskringsboken-znb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.dansklf.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bok.xn--lastskringsboken-znb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.forlagetcolumbus.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systimes.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.cargosecuring.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udgii.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibog.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mg.edupub.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.steno.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.nucleus.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nam.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edupub.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digi.hansreitzel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbok.nam.fo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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