appsec-web-ui-prod.security-sandbox.lfscnp.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:31:4f:e9:be:96:10:24:5b:41:33:81:63:7c:f7:99 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=appsec-web-ui-prod.security-sandbox.lfscnp.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:31:4f:e9:be:96:10:24:5b:41:33:81:63:7c:f7:99
Serial Number (int): 12219095337636570683006272554779080601
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 28:13:e3:f3:e1:df:0c:23:ed:76:ff:b2:01:bf:b8:ab:d3:70:ae:3e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 72:0c:80:16:77:ba:81:e7:69:e3:4e:ab:9d:2a:6a:34:18:20:08:0c
Fingerprint (sha256): 18:24:3c:da:e0:7c:78:87:24:d9:ba:07:3b:d1:e3:19:8a:3d:ae:a3:04:db:f1:c5:d8:89:7b:f1:72:f9:49:df

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate appsec-web-ui-prod.security-sandbox.lfscnp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for appsec-web-ui-prod.security-sandbox.lfscnp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appsec-web-ui-prod.security-sandbox.lfscnp.com

Other certificates including the domain name lfscnp.com

(limited to 100 certificates)
lpay-fraud-mock-test-stub.test.lpay-np.lfscnp.com
37degress.digitalweb.lfscnp.com
lpay-monolith-admin-dev.dev.lpayapp-sandbox.lfscnp.com
ach-details.originations-np.lfscnp.com
go-api-chaos-eng-dev.002.mytest2.sandbox.lfscnp.com
consumer-fraud-service.sandbox.o10s.lfscnp.com
service-accounts-test.new.01.test.eapi-np.lfscnp.com
imperva.com
ecs-demo-cnp-dev.002.mytest2.sandbox.lfscnp.com
lpay-app-originations-dev-au.dev.lpayapp-sandbox.lfscnp.com
pl-service.01.prod.eapi-pci.lfscnp.com
dnb-test2.001.development.odds-np.lfscnp.com
genoapay-api-test.np.o10s.lfscnp.com
70e8843709e812f7ca0d9.prod.merchant-integration-bnpl.lfscnp.com
appsec-helloworld-dev.security-sandbox.lfscnp.com
motorapp-prod.001.production.odds.lfscnp.com
customer-master-prod.datalake-prod.lfscnp.com
genoapay.admin.dx-prod.lfscnp.com
039004c7f9672353f72.001.development.datalake-sandbox.lfscnp.com
kong-service-test.test.se-platform-np.lfscnp.com
test.001.testapp.sandbox.lfscnp.com
0d8ba5758bf1f14a2776681d43b3f8a53.01.test.eapi-pcinp.lfscnp.com
pin-change-service-test.01.test.eapi-pcinp.lfscnp.com
auth.dev.se-platform-np.lfscnp.com
test.001.testapp.sandbox.lfscnp.com
buildkite-webhook-datadog-event-dev.01.dev.eapi-np.lfscnp.com
62df4d98fe86184a5c9f8e006e715bd8.collections-sandbox.lfscnp.com
imperva.com
staging.wetcms.digitalweb-np.lfscnp.com
notification-service-test.01.test.eapi-pcinp.lfscnp.com
lpay-service-equifax-dev4-au.dev.lpayapp-dev4.lfscnp.com
customer-support-service-dev.sandbox.eapi.lfscnp.com
cnp-ecs-demo-dev.002.mytest2.sandbox.lfscnp.com
cards-visioncics-adapter-dev.01.dev.eapi-pcinp.lfscnp.com
react-ts-admin-test.test.sandbox.lfscnp.com
imperva.com
latitudefinancial-co-nz.digitalweb-np.lfscnp.com
*.okta-custom.dev.se-platform-np.lfscnp.com
responsysassets.prod.digitalweb.lfscnp.com
imperva.com
imperva.com
evolve-dev2.001.development.odds-np.lfscnp.com
6e1ef36f1003de406a7b68ef.001.development.data-cde-np.lfscnp.com
coreapi-dev2.001.development.odds-np.lfscnp.com
accounts-link-unlinked.001.production.eapi.lfscnp.com
staging.lowratemastercard-com-au.digitalweb-np.lfscnp.com
cf-mobile-config.mobile.lfscnp.com
lpay-service-consumer-dev2.dev.lpayapp-dev2.lfscnp.com
odds-authentications.test.odds-np.lfscnp.com
vision-haproxy-prod.dx-cde-prod.lfscnp.com
vision-adapter-dev.new.01.dev.eapi-pcinp.lfscnp.com
7d5265b7789f253ebc3.001.development.datalake-sandbox.lfscnp.com
doc-upload.originations-np.lfscnp.com
staging.latitudefinancial.digitalweb-np.lfscnp.com
oscar.nonprod.digitalservicing-np.lfscnp.com
soft-quote-proxy-test.np.o10s.lfscnp.com
apply-mock-response-dev.merchant-services-sandbox.lfscnp.com
*.staging.gomastercard.com.digitalweb-np.lfscnp.com
034ac86c3ec7e392b5acf71a0f55b8fb750.dev.lpayapp-dev1.lfscnp.com
cnp-socket-mode-slackbot-starter-test.test.sandbox.lfscnp.com
staging.umiloans.digitalweb-np.lfscnp.com
*.staging.28degreescard.digitalweb-np.lfscnp.com
consumer-risk-service-dev.sandbox.o10s.lfscnp.com
coreapi-prod.001.production.odds.lfscnp.com
appsec-dojo-prod.security.lfscnp.com
instinct-prod.dx-cde-prod.lfscnp.com
cnp-access-manager-prod.prod.auth.lfscnp.com
*.okta-custom.prod.se-platform.lfscnp.com
appsecd-github-webhook-test.security-test.lfscnp.com
imperva.com
12b20401b771de810734b8938349.001.development.odds-np.lfscnp.com
staging.buyersedge.digitalweb-np.lfscnp.com
service-products.01.prod.eapi.lfscnp.com
account-linking-v2-prod.new.01.prod.eapi-pci.lfscnp.com
api.lfscnp.com
lpay-service-account-dev.dev.lpayapp-sandbox.lfscnp.com
temenos-service-poc-dev.sandbox.eapi.lfscnp.com
imperva.com
customer-master-dev.datalake-sandbox.lfscnp.com
servicing-customer-master-dev.sandbox.eapi.lfscnp.com
lpay-service-dowjones-sandbox.sandbox.lpay-sandbox.lfscnp.com
*.37degress.digitalweb-np.lfscnp.com
collections-pcc-service-test.collections-nonprod.lfscnp.com
collections-pcc-service-dev.collections-nonprod.lfscnp.com
applybuy-vision-bridge.prod.merchant-wallet.lfscnp.com
wetcms.prod.digitalweb.lfscnp.com
appsec-web-ui-prod.security-sandbox.lfscnp.com
lpay-app-originations-dev2-au.dev.lpayapp-dev2.lfscnp.com
poi-service-prod.prod.o10s.lfscnp.com
appsec-github-dev.security-sandbox.lfscnp.com
832c9417d0aaa792294e4dd7d3c698a.new.01.prod.eapi-pci.lfscnp.com
tcs-bancs-service-prod.new.01.prod.eapi.lfscnp.com
documents-service-dev.01.dev.eapi-pcinp.lfscnp.com
nz-apply-merchant-redirect.originations-np.lfscnp.com
lpay-service-mail-api-dev.dev.lpayapp-sandbox.lfscnp.com
www.tmpkong.apigateway-sandbox.lfscnp.com
13790fed5a068feda1caf0e50145.001.development.odds-np.lfscnp.com
lpay-app-originations-test-nz.test.lpay-np.lfscnp.com
lfs-ui.digitalservicing-np.lfscnp.com
8e062ea304a968893b3fc8edd7e4.001.development.odds-np.lfscnp.com

Certificate

The complete raw certificate details for appsec-web-ui-prod.security-sandbox.lfscnp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Xn4y9thTtOjXrypDXVG
UKby2lZh6ERZWlcUBCgcOeXSgIwcgA8y9TfdZvdLUJKX6+muqrPLNhnBJ6ynOfpa
Nrh+Oja3jGBTDfMgh2/0fcQjleWpLXmsIrCzSNRoh/FbswfBkT3slMa+GbsOy0cu
kFEpj/HeR/bH1/QOMw8tPGD8IDpIc0wEP/KE+H0uhU5zo8hGa6qjO4zAnTBgw0xa
NzqAGIUNrWWHEhalO2EPAQmZiaWxzQh+QrI5FkMYIwB78xw/yA4WD0AQ/TjTuA9j
k/uvdO5Z9rWHaJvZo+reouhvRbOgrsoBBMnryofdE8sNKPdZORw2j7TRvhBz+r+L
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12219095337636570683006272554779080601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'appsec-web-ui-prod.security-sandbox.lfscnp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28463765183523325679617309349953434243241247955933566429373657562948324212860609015905262867108968540770584089116133147824561829214989469801634831190109239607197810571535031778258824998505439184493589320485542731041421418274522890710806559347514003972866684888229948709962220824991804863003008058460965852430603730751636344030990201203683639276305980796475448639624146985684632699554075969094237788261901214359171049848931434306940150566215156402910811306753068210707680712446787009731144063208933440218588738481391784095693660188931749444614490997321875172617305883307703016543811972187152623211549529656046427015989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2813e3f3e1df0c23ed76ffb201bfb8abd370ae3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsec-web-ui-prod.security-sandbox.lfscnp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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