apps2.mpac.ca

- Municipal Property Assessment Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 48:09:bd:5f:27:8c:b5:84:00:00:00:00:50:f5:79:16 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Municipal Property Assessment Corporation

Organization: Municipal Property Assessment Corporation
Organization unit: Information Technology
State / Province: Ontario
Locality: Pickering
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:09:bd:5f:27:8c:b5:84:00:00:00:00:50:f5:79:16
Serial Number (int): 95754987282571307499635203125844211990
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 61:4d:9e:ea:ce:1a:8b:fd:eb:65:14:49:ee:8e:38:f2:e6:32:91:9f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): cf:8d:df:9e:09:80:2d:88:b6:6e:dc:7a:9c:28:b2:42:70:9d:60:40
Fingerprint (sha256): 23:c5:22:71:a1:c8:69:38:e5:c4:e2:78:72:d1:95:4a:57:0a:24:af:f4:f8:1e:93:67:e6:d7:25:ed:1c:4a:fc

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate apps2.mpac.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps2.mpac.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps2.mpac.ca
www.apps2.mpac.ca

Other certificates including the domain name mpac.ca

(limited to 100 certificates)
*.aws.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
b2buat.mpac.ca
*.aws.mpac.ca
soporte.cjgconsultores.com
support.akylade.com
acs-online.mpac.ca
it-helpdesk.hccom.org
guestportal.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
*.aws.mpac.ca
it.oodc.com.ph
services.mpac.ca
*.aws.mpac.ca
*.aws.mpac.ca
desk.mpac.ca
*.aws.mpac.ca
adfs.mpac.ca
*.aws.mpac.ca
b2b.data.mpac.ca
it.oodc.com.ph
services.mpac.ca
servicedesk.aws.mpac.ca
mpac.prd.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
help.bookfocal.com
guestportal.mpac.ca
support.spidercost.com
help.tradetechnica.com
apps.mpac.ca
*.aws.mpac.ca
quiz.apexstrategygroup.org
*.aws.mpac.ca
b2b.data.mpac.ca
ra.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
apps2.mpac.ca
support.cosmicktechnologies.com
instream.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
support.orly.com
blackduck.aws.mpac.ca
helpdesk.al-mozon.com
api-acs-online.mpac.ca
support.45z.net
casper.mpac.ca
b2b.web.mpac.ca
helpdesk.ie-launch.com
help.tradetechnica.com
mgmttun.mpac.ca
support.thebestclaims.com
sightline.mpac.ca
b2b.web.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
support.cosmicktechnologies.com
survey.makusafe.com
sclearpasslab.prd.mpac.ca
www.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
*.k8s.mpac.ca
servicesuat.mpac.ca
support.foodaccessportal.org
apps2.mpac.ca
ClarityConnect.mpac.ca
mpac.ca
*.aws.mpac.ca
www.axi.sierraleone.mpac.ca
aws.mpac.ca
test1.mpac.ca
aaa.mpac.ca
sap-ec-npr-02.prd.mpac.ca
support.45z.net
annualreport.mpac.ca
apps2.mpac.ca
support.cosmicktechnologies.com
support.cosmicktechnologies.com
guestportal.mpaclab.net
anyconnect.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
sap-ec-prd-01.prd.mpac.ca
guestportal.mpac.ca
it.tnsos.help
it-helpdesk.hccom.org
webtrends.mpac.ca
api-acs-online1.mpac.ca
mpac.ca
servicedesk.mpac.ca
lync01.um.mpac.ca
portal.mpac.ca

Certificate

The complete raw certificate details for apps2.mpac.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHwENHPa2W583dYCAkiq
ALIma7pGKphQZR8+FQqZ2UZ2PbxUtBFoEgsoWbM5U3+/Zj3VHoaPHO2rLVcotSVW
sle6Jv0SG1iB+5glPl1m+oKGfDGnONvth3uUAvjwZdPOAS0PzD/NnL9mTDK0LX+A
8x7bOF+ENQwSfwVXHCTXAM5LhP2aLr57Y4qt7qJFLnJUHtYtrDNwl3TgRrwXxOPs
Ymn2SUBb0xb28yN/dzLMqkwPIj7mKL1+G6BzGs66lsTd8u2sATCG4Y+9OvQ0Xn1h
2OtORG5fPZTudcLysGAOFNvEAOtfNWaiJh/+T44baaoeG7z76V5XY/IFqlhCss2s
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95754987282571307499635203125844211990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 14:31:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-05 15:01:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pickering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Municipal Property Assessment Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps2.mpac.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22784049672506623400206587084198718608377704049092031389694616469301323499537184060834621893798330437584113445441458114018915625663414467499244009882337510958716991313366865540398785582589794830884025432603540009372204937158333662947439490054901604473693821400484883312373154552482562145437299793449422503215852041170071880431930804626482543262670622940502516524250798944000130761437837773807778679725563159913184105080595760754367960407673069829710959573232972719128686694189471965529737029546971717844214467582412958373133902205272670089406525934144919364293208925652195941803654087737130640768328238969299395259471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps2.mpac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apps2.mpac.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							614d9eeace1a8bfdeb651449ee8e38f2e632919f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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