ibamaflex.ap.be

- Artesis Plantijn Hogeschool Antwerpen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 6f:1b:fe:b5:ec:51:1d:bd:fd:5e:2a:22:1d:da:07:12 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Artesis Plantijn Hogeschool Antwerpen

Organization: Artesis Plantijn Hogeschool Antwerpen
Address: Lange Nieuwstraat 101
Postal code: 2000
State / Province: Antwerpen
Locality: ANTWERPEN
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:1b:fe:b5:ec:51:1d:bd:fd:5e:2a:22:1d:da:07:12
Serial Number (int): 147689665692779370606971624723729483538
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 49:ca:7c:d9:14:24:b4:88:2a:52:60:f7:c3:4a:75:c2:bb:9e:07:e1
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b3:6b:a8:38:db:4c:2b:22:7a:b8:e9:b4:4f:02:b1:09:50:f6:eb:e7
Fingerprint (sha256): 0e:8f:f4:ef:fa:87:80:37:75:a3:d1:f4:1c:fb:47:67:cd:11:67:fc:f6:d7:fa:2f:ca:12:7e:42:0a:58:e5:b7

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ibamaflex.ap.be

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ibamaflex.ap.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ibamaflex.ap.be
bamaflexweb.ap.be
inschrijven.ap.be

Other certificates including the domain name ap.be

(limited to 100 certificates)
inda.ap.be
ictpedia.ap.be
msimagine.ap.be
journalistiek.ap.be
journalistieknamen.ap.be
msimagine.ap.be
zorgneticuro.ap.be
inclusiedag.ap.be
showandtell.ap.be
gdm.ap.be
securelogin.ap.be
marketingshop.ap.be
eaict.ap.be
workshopweb.ap.be
senseofhome.ap.be
senseofhome.ap.be
eps.ap.be
eps.ap.be
feedback.ap.be
*.ap.be
e-campus.ap.be
inda.ap.be
eaict.ap.be
stats.ap.be
senseofhome.ap.be
filewave.ap.be
feedback.ap.be
msimagine.ap.be
sts.ap.be
ibamaflex.ap.be
showandtell.ap.be
beta.eaict.ap.be
marketingblog.ap.be
workathome.ap.be
antivirus.ap.be
msimagine.ap.be
journalistieknamen.ap.be
blokkenloop.ap.be
ai.ap.be
sr18.ap.be
feedback.ap.be
journalistiek.ap.be
wpnet.ap.be
jou3blog.ap.be
jou3blog.ap.be
blokkenloop.ap.be
journalistieknamen.ap.be
*.ap.be
stats.ap.be
aui.ap.be
stats.ap.be
dialoog.ap.be
*.ap.be
marketingblog.ap.be
senseofhome.ap.be
evasys.ap.be
surveys.ap.be
marketingblog.ap.be
surveys.ap.be
eps.ap.be
showandtell.ap.be
inda.ap.be
articulate.ap.be
blackboard.ap.be
journalistiek.ap.be
inclusiedag.ap.be
ai.ap.be
sr18.ap.be
eaict.ap.be
learning.ap.be
msimagine.ap.be
gdm.ap.be
ictpedia.ap.be
dialoog.ap.be
msimagine.ap.be
ictpedia.ap.be
webdeposit.ap.be
gitlab.ap.be
surveys.ap.be
rancher.ap.be
*.ap.be
*.dev.ap.be
ai.ap.be
blackboard.ap.be
inda.ap.be
stats.ap.be
cbbc.ap.be
ictpedia.ap.be
webmail.ap.be
cbbc.ap.be
ai.ap.be
*.staging.ap.be
showandtell.ap.be
ibamaflex.ap.be
jou3blog.ap.be
senseofhome.ap.be
journalistiek.ap.be
learning.ap.be
marketingblog.ap.be
inda.ap.be

Certificate

The complete raw certificate details for ibamaflex.ap.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGcdyIik1KQweuuCGU37
+O2NtGssTHYg2AjOO2yNAAu3oAfX9dxmi0aT1q1Y1zz0dvCJWNUfLoX2lbB3BJeh
F4ERxO4Ktb6slzwwiixwCphLwuPUMy0Ga01O6eyjfhjpRU65wzHwiZ4l+jBfWJT5
HhVg2YSrZpKJgJ1mUxoa64l07TiVVbZEpa6F+Agi1Y7XTV6s4hky3AmlW7fxd1mh
UH8ybah+5YWkWKAIFhjliJz/fWTfp3Hf4tAp5JMBmGzplzD23soRiiz3LvcYAmvA
xyUtYK9h8J+fTHzmmqTSdY7HY9RE2WQ1xL5FQhVbvs+AfQABbP0+EW7S/7+LgZOW
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147689665692779370606971624723729483538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANTWERPEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lange Nieuwstraat 101'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Artesis Plantijn Hogeschool Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ibamaflex.ap.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23278696676728941049757745724197668256931495171102384012265744228113833571362262924759166715711893690833974719339735073955032587911015445874614767442909777927474665826450651099043436922466456634696912439137996437888966151613866783690312692159091672711832168465916813634363211738190951243930130429832974890947581412968698053674285797100949291971895112545192407160818688750571580947782801583968685798558946459239862054428673913375777579663907860852030370470416832726810011933422897902777199495247197775956946369998178923060778594415672800097925451939291602376364576922043820234386705223986627382208411483950686875653683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49ca7cd91424b4882a5260f7c34a75c2bb9e07e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000175232d7b900000040300473045022004c36f69ecdf24edd98d78874f0fcdc16f507e3d5173a98d70ed9d7bc4b5f101022100a709723c8c069086401d6a019132fe86c4196bc07ab1a18bcff5629c3d75b1ee0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000175232d7c260000040300473045022011335a854a7aea17139a02f3e76331439ad642b9f2d954870569e4dbf9cde69f022100a88eb4d8eac6862319b190643b1bf220441ee92a13eb9c8f20b4ffbd4db6fc30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibamaflex.ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamaflexweb.ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inschrijven.ap.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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