www.chinacache.com

- Beijing Blue-IT Technology Co.,Ltd. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:be:3f was issued on by GeoTrust, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Beijing Blue-IT Technology Co.,Ltd.

Company registration number: 6ROYqOe5dnsf2ke/7Pcgfa2542lGNtwM
Organization: Beijing Blue-IT Technology Co.,Ltd.
Organization unit: IT Dept.
State / Province: beijing
Locality: beijing
Country: CN

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:be:3f
Serial Number (int): 114239
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 50:56:8d:4d:29:1b:25:1f:e9:d7:17:46:60:88:23:a8:4c:81:9e:f4
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): e9:b4:cd:1d:b9:9a:47:63:9c:b3:e7:17:68:a0:b3:a1:a8:eb:a3:79
Fingerprint (sha256): 11:26:b0:c6:4b:7f:d5:4e:c4:9f:34:3f:23:97:7b:09:f7:02:b6:65:42:48:6b:07:a8:8f:8a:06:8c:78:c6:79

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.chinacache.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chinacache.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sxn360.com
ssl-static.baifendian.com
ssl-static1.baifendian.com
www.pjc360.com
fuss10.elemecdn.com
static10.elemecdn.com
www.chinacache.com
chinacache.com

Other certificates including the domain name chinacache.com

(limited to 100 certificates)
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
report.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
log301.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
*.cosapi-wz.chinacache.com
www.chinacache.com
test2.edu.chinacache.com
www.chinacache.com
ccms.chinacache.com
cdn04.ccedge.net
*.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
yun.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
storage-1.chinacache.com
www.chinacache.com
*.cosapi-wz.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
en.chinacache.com
www.chinacache.com
yun.chinacache.com
*.chinacache.com
www.chinacache.com
www.chinacache.net
www.chinacache.com
www.chinacache.com
*.cosapi-bj.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
s.portal.chinacache.com
*.cosapi-bj.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
ap4-1.cdn.salesforce-communities.com
www.chinacache.com
www.chinacache.com
*.chinacache.com
www.chinacache.com

Certificate

The complete raw certificate details for www.chinacache.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg86MFxnxiFC8J5g4SQf
uieMedqYdb3mrQmk2PjMafGvMJMnDvwICAwYGsq6hlKIa/rhVHnYVeXFK1ff1a96
wb9OCCFd3Mvir2lLLX+eg+EgvUsIubO27otydFvWrLZjQp23tslapgEZ6DAppBm3
a+Cu6XlFuuUVsUr3jgCeAofmKltFxND0PlSmEf8jHUJruc0eYpI+j39EMweEHjRq
kmuwWQo1uXScLb3Wj7FWpiSGnW4UcnGwsuXVESqHV0zakhYieHLjzABRAFDE3Llv
Opml86xHu6B01y00xdSwNy++YeVk5ZFujHdDZKDef4s6+RZBuTDqvQnrJ5nzrt+L
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-10 21:37:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-12 00:32:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6ROYqOe5dnsf2ke/7Pcgfa2542lGNtwM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beijing Blue-IT Technology Co.,Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chinacache.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25002693244980582712404875224321837312874185473449062212731732731649433273497961278063807932688182551624212193034955209737852709518943550708531773140001034169873724813774446198528211150037814632298472135840463091778423648281969701662948485044283113377173981792020351259034290339689665187263441662014589458760323764887046487515259782266232667289820966665820379669417798903656187788040181730292330153279490430022880026630310208226512785563865606707172240269014404770400790827204918841559128639178642914648000254409196344188348587352989173876113170924832046505658200840117361111751990001456785889814673548417550384073627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sxn360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-static.baifendian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-static1.baifendian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pjc360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuss10.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static10.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinacache.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50568d4d291b251fe9d71746608823a84c819ef4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00878611ea786f94eb8ea08cb7aa4f503584e2d471a8c8300ea4c868b7bdce059cb3e55156ed9c39709d371e6c3cbbb3c56119f325c97af66061d4cbb73f335295577053e71f2d15e11f625e35d1730b5d2defb2441ea386ae2eb97051605a0b039c4f2a74c5f720e133251058c008599eae11b2d687831047c21c1f50e1519a735cd563ddce25386d2fd47ab4e885dcc64c11ab5bc0d61d60a9c393b491c02d0d1ee85ead822c26e4da5a3875672a3a3cf6904ee1d4d9ac209888483bbb9fc0e9081f457fcea36f624bc5e9686885057df5cf59bcedbba56a0f9f12ae2b675d1a10ddc61a01b07969a16948519c3bbf21119dea1935f85b9e7bc9e8210c13f0bd