marte.unirioja.es

- Universidad de La Rioja -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 05:8d:1c:fa:4e:3a:7f:0d:2b:ce:18:3e:47:70:dc:12 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universidad de La Rioja

Organization: Universidad de La Rioja
Organization unit: Servicio Informatico
Locality: Logrono
Country: ES

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 05:8d:1c:fa:4e:3a:7f:0d:2b:ce:18:3e:47:70:dc:12
Serial Number (int): 7378841574698069320108152493276453906
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fb:2f:0b:e4:c8:7c:ce:78:e9:b5:90:6d:51:c0:6d:48:0f:67:ee:70
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 54:d6:b4:7c:e5:bb:04:14:fe:de:27:bc:59:3e:c0:68:47:bd:cb:ac
Fingerprint (sha256): 1e:8f:9d:b3:bb:65:5a:42:ac:dd:e8:ae:a5:90:61:8f:4f:76:42:a5:62:b9:9b:bd:d4:2d:b4:8f:a0:99:1e:05

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate marte.unirioja.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marte.unirioja.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marte.unirioja.es

Other certificates including the domain name unirioja.es

(limited to 100 certificates)
customerportal.uk.rlb.com
iauxxiec.unirioja.es
ceiar.unirioja.es
support.homeinstead.ie
systems.squaredup.com
caur.unirioja.es
helpdesk.epsilonnet.gr
fundaciondialnet.unirioja.es
delfos.unirioja.es
leucade.unirioja.es
dialnet.unirioja.es
aps.unirioja.es
help.sprintrade.com
helpdesk.presto.se
support.homeinstead.ie
hub.theriderfirm.cc
acmag.unirioja.es
www.unirioja.es
itservicedesk.paradigmhousing.co.uk
servicedesk.esmsglobal.com
ofesta.unirioja.es
catalogo.unirioja.es
servicedesk.iquw.com
ithelpdesk.familycarers.ie
service.littlegarth.org
tosca.unirioja.es
reajo.unirioja.es
investigacion.apps.unirioja.es
aelectronica.unirioja.es
tabata.unirioja.es
soporte.inmocolonial.com
seminariomirianandres.unirioja.es
acaymo.unirioja.es
support.homeinstead.ie
customerportal.uk.rlb.com
soporte.unirioja.es
ceiar.unirioja.es
helpdesk.mlw.mw
helpdesk.itsligo.ie
servicedesk-meckenheim.pvs-europe.com
servicedesk.iquw.com
nemo.unirioja.es
jornadascoseg.unirioja.es
support.homeinstead.ie
biblioteca.unirioja.es
*.apps.unirioja.es
biblioteca.unirioja.es
aps.unirioja.es
aps.unirioja.es
pruebas-ur.unirioja.es
aps.unirioja.es
jera.unirioja.es
servicedesk.alessi.com
televitis.unirioja.es
campus.apps.unirioja.es
support.homeinstead.ie
service.littlegarth.org
soporte.martinezabolafio.com
uremplea2014.unirioja.es
eventos.uam.es
support.homeinstead.ie
sage.unirioja.es
support.homeinstead.ie
publicaciones.unirioja.es
uxxi-rrhh.unirioja.es
bases.unirioja.es
glaur.unirioja.es
xebook.unirioja.es
abdemeducation.eu
servicedesk.coram.eu
data.abdemeducation.eu
ithelpdesk.gmmh.nhs.uk
support.homeinstead.ie
yaiza.unirioja.es
beroniaweb.unirioja.es
sd.srk-zuerich.ch
fundaciondialnet.unirioja.es
investigacion.unirioja.es
aps.unirioja.es
tabata.unirioja.es
servicedesk-meckenheim.pvs-europe.com
helpdesk.sunlight.gr
marte.unirioja.es
support.brill.com
beroniaweb.unirioja.es
support.homeinstead.ie
comunicaciencia.unirioja.es
catalogo.unirioja.es
helpdesk.itwfasteners.com
support.homeinstead.ie
kalossi.unirioja.es
biblioteca.unirioja.es
investigacion.apps.unirioja.es
ithelpdesk.frederic-robinson.co.uk
uremplea.unirioja.es
soporte.unirioja.es
bsl.unirioja.es
uml2prov.unirioja.es
grouphelpdesk.oceanscan.co.uk
ofesta.unirioja.es

Certificate

The complete raw certificate details for marte.unirioja.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a6Dz4bu8j5c8L/OPeRq
zQbHMhP17CsanaSks/CV/JtByO5SDmfK57vVoVhOHUH2MrAgJuuxxHXdDJXwyOkK
pbdQBJXJd0qfO0ghT1yv+2yWLNrRh6JI8IzFvw2OJDUY5IKJkctHvTYzNavx5mvQ
OhxDhq74r76mbEmog97i4dD/qTsOy6OZXbJvW/skC6TFI4Ya6rSlBQAZb6bSC2d+
vcQPhcmm0xhZrtVmaD0AOJpcoF/EuXht+/e4+kFuygieFAt1Qmlh9N65m851PGQE
1ik08T+1tgmOK4WO58NCpaf+i7ZRzizA8itxLiJAV5WHK/qkK3f65fjID5Umny+A
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7378841574698069320108152493276453906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Logrono'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universidad de La Rioja'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Servicio Informatico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marte.unirioja.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27479768674976298962037333275635352283318461554715630820511934336271464263186390366481800982984884985136909391780247499407187888024884615330769820804571711100611035387834424395277308885490529532799014407754760899683170349724063314152782890253351875694226367848746892317593601506338155363898028118641633408065316113962447318777829511594855519266459399206809934813427788813660310305640740907081787613023228531492214431026660772271733559444729734162150365901394402501597603793922836848958696789470981119988257055981675067653575715023316998404713438272238685748514756539479275442963210979292917254836109374842744911921399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb2f0be4c87cce78e9b5906d51c06d480f67ee70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marte.unirioja.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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