payfits.unicredit.eu

- UniCredit Bank GmbH -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 0f:94:7b:08:4f:65:3f:25:ea:ca:dc:3e:80:0c:09:ed was issued on by Actalis S.p.A..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UniCredit Bank GmbH

Organization: UniCredit Bank GmbH
State / Province: Bayern
Locality: München
Country: DE

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:94:7b:08:4f:65:3f:25:ea:ca:dc:3e:80:0c:09:ed
Serial Number (int): 20709375266615157344360332223159470573
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:ec:ed:07:13:de:23:a8:02:45:b6:3a:2b:df:b4:9a:a1:96:cd:63
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 96:da:06:8d:0f:34:1a:5f:b6:a6:27:45:a0:af:7b:5d:fc:fb:58:8d
Fingerprint (sha256): 11:9b:c0:9b:d0:de:94:5b:a5:d1:e2:d3:55:24:fe:93:f5:a3:09:61:40:00:03:ca:b7:1d:3c:c8:00:d0:8b:1f

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate payfits.unicredit.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for payfits.unicredit.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

payfits.unicredit.eu

Other certificates including the domain name unicredit.eu

(limited to 100 certificates)
uagqa.unicredit.eu
payfits.unicredit.eu
globaltrade.it.hypovereinsbank.de
ucremanutenzione.unicredit.eu
mx13.unicredit.eu
changehub.unicredit.eu
www.qc.research.unicredit.eu
mx19.unicredit.eu
resetvc.unicredit.eu
san-005.ceros.com
seguc.unicredit.eu
mx05.unicredit.eu
ebanking.it-v.unicreditgroup.de
authorization.internal.api.unicredit.eu
convene.unicredit.eu
nra.unicredit.eu
mobileqa5.unicredit.eu
ccnp-de.unicredit.eu
jobs.unicredit.eu
mx04.unicredit.eu
vidm.unicredit.eu
*.extranet.unicredit.eu
ensqa.unicredit.eu
resetmb.unicredit.eu
*.extranet.unicredit.eu
esg-survey-eu-hvb.unicredit.eu
*.rasqa.unicredit.eu
mobira.unicredit.eu
authorization.api.unicredit.eu
ebanking.qc.unicreditgroup.de
mobileqa1.unicredit.eu
mitrab.internal.unicredit.eu
qnra.unicredit.eu
ilibrary.unicredit.eu
mx17.unicredit.eu
ra.internal.unicredit.eu
mx07.unicredit.eu
convene.unicredit.eu
mdm.unicredit.eu
api.payfx.unicredit.eu
vrrab.unicredit.eu
san-005.ceros.com
www.research.unicreditgroup.eu
corporateportal.unicreditgroup.eu
reset.unicredit.eu
www.unicreditgroup.eu
api.financial-institute-de.unicreditgroup.eu
mobileqa3.unicredit.eu
ial.unicredit.it
segdev.unicredit.eu
ensqa.unicredit.eu
sipedge.unicreditgroup.eu
globaltrade.it.hypovereinsbank.de
mobileqa5.unicredit.eu
be-part-of-it.unicredit.eu
mx07.unicredit.eu
www.unicreditgroup.eu
san-005.ceros.com
authorization.openbanking.unicredit.eu
mobileqa3.unicredit.eu
mx04.unicredit.eu
sso.unicredit.eu
vrtrab.internal.unicredit.eu
ideasharing.unicredit.eu
mdmqa.unicredit.eu
uspg.unicredit.eu
nra.unicredit.eu
vidmqa.unicredit.eu
mx05.unicredit.eu
vtra.internal.unicredit.eu
www.qc.research.unicreditgroup.eu
UCRECensimentoQA.unicredit.eu
processihrpe2.unicredit.eu
sipedge.unicreditgroup.eu
www.unicreditgroup.eu
authorization.api.unicredit.eu
tls10.unicredit.eu
*.extranet.unicredit.eu
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
san-005.ceros.com
developer.unicredit.eu
payfits.unicredit.eu
ens.unicredit.eu
UCREManutenzioneQA.unicredit.eu
feedback.unicredit.eu
globaltrade.it-v.unicredit.eu
hrprostaffm.unicredit.eu
ebanking.it.unicreditgroup.de
mobileAT.unicredit.eu
uspg.unicredit.eu
segat.unicredit.eu
san-005.ceros.com
mx17.unicredit.eu
sftpfgi.unicredit.eu
uagqa.unicredit.eu
lp-00.buddybankmessaging.unicredit.eu
segatqa.unicredit.eu
uctradefinancegate-1.unicredit.eu
segatqa.unicredit.eu

Certificate

The complete raw certificate details for payfits.unicredit.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoE9BZpZLFhS+07YNBdM
f6IxAmbLHbqmJ3PxI/0DNQBCyXmJxtlX8ngNLcCyDj9f7EntMJ5dqztQoDLuq4yh
EKjRmIWZPOyLd41qZag9rzBw0m/zoCsPddiJvp0s5lAgWnV8+t1YKueYhuSn0pjF
CNS+Xq7DgDrU3pJOSLF/LUw+SqSaYG6IaWO4HVpevw/tYUl3rWkgnCJcH6EPAG95
CxiYPfYrYAnKEBjVSZLh0MA+b76ICie9aaYuWO/TWypPBzJidpRARE/FdKvfeKZF
NFigG7VPmMIlvw56RvS9dt2I/tCjQ+qVjIcGwFmbECHBU7OWqfO39yNPJStaTfFS
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20709375266615157344360332223159470573
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 13:51:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-19 13:51:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit Bank GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'payfits.unicredit.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26068820636892146654856613821690234703450317257293479036930167236159894838195842290480810205455635754921142714065675115459457006317288280127094909220431180879059016830743245334093555218748405258300260361853795714668995785826875290531473072627209573992565159455961954151157779585055577318139047093267867486000057206841136647972494093793019043826236235492977013599123739562368582876553323374847416981746331807616271297498420645305129700872889686960586121534903621287692780392693755265758594397553219879026339995724702943748530638151578059199887408482555433456640871230084087742142096998028305621880013175323118697271821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payfits.unicredit.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0deced0713de23a80245b63a2bdfb49aa196cd63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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