discover.mica.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d7:ff:b4:36:46:d7:7f:fa:a0:a0:e6:64:31:b8:77:2a:7d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=discover.mica.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:ff:b4:36:46:d7:7f:fa:a0:a0:e6:64:31:b8:77:2a:7d
Serial Number (int): 421949741468265230015118825503712477653629
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:51:a9:1a:bc:34:5e:5e:e5:a3:9c:2c:2f:69:b6:fe:93:0e:78:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:a2:a4:09:c4:b3:0a:66:9d:16:f9:37:f1:5b:ae:91:62:73:3f:f3
Fingerprint (sha256): 2f:e2:e0:06:04:de:9a:ac:af:7d:bb:29:89:fe:c7:2e:4f:e3:92:96:43:8d:6f:3b:83:4f:ea:70:5a:d0:33:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate discover.mica.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for discover.mica.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

discover.mica.edu

Other certificates including the domain name mica.edu

(limited to 100 certificates)
portal-sp.mica.edu
inside.mica.edu
libguides.mica.edu
*.ezproxy.mica.edu
www.mica.edu
discover.mica.edu
websupport.mica.edu
duo.mica.edu
medium.mica.edu
mica.edu
libguides.mica.edu
chesapeake.mica.edu
csprd90.mica.edu
CGWTest.mica.edu
ptprd85.mica.edu
gwprd.mica.edu
moodlerooms.com
moodlerooms.com
euphrates.mica.edu
shinultima.mica.edu
bahamut.mica.edu
mica2020.missionmedia.net
shop.mica.edu
new.mica.edu
danube.mica.edu
connect.mica.edu
apply.mica.edu
digitaldecker.mica.edu
tms.mica.edu
libguides.mica.edu
www.mica.edu
discover.mica.edu
plannedgiving.mica.edu
shop.mica.edu
sp.mica.edu
moodlerooms.com
shingraduate.mica.edu
ldapserver3.mica.edu
mica.edu
shop.mica.edu
shinomega.mica.edu
inside.mica.edu
shop.mica.edu
idp.mica.edu
commotion.mica.edu
accreditationpolicies.acr.org
libguides.mica.edu
moodlerooms.com
indus.mica.edu
kama.mica.edu
neckar.mica.edu
gwtst.mica.edu
gwprd.mica.edu
commtoolkit.mica.edu
inside.mica.edu
sp.mica.edu
info.mica.edu
velocity.mica.edu
moodlerooms.com
csprd90.mica.edu
webdev.mica.edu
classsearchtest.mica.edu
kalu.mica.edu
testing.mica.edu
moodlerooms.com
idp.mica.edu
velocity.mica.edu
www.mica.edu
online.mica.edu
mica.edu
ldapserver3.mica.edu
csprd92.mica.edu
mica.edu
sp.mica.edu
www.mica.edu
csprd90.mica.edu
velocity.mica.edu
idp.mica.edu
mica.edu
moodlerooms.com
medium.mica.edu
danube.mica.edu
online.mica.edu
duo.mica.edu
inside.mica.edu
discover.mica.edu
helpdesk.mica.edu
cstst90.mica.edu
inside.mica.edu
inside.mica.edu
jonesfalls.mica.edu
alertus.mica.edu
bahamut.mica.edu
mica.edu
Maryland Institute College of Art (THE MARYLAND INSTITUTE)
whatsupgold.mica.edu
libguides.mica.edu
vpn.mica.edu
csdev90.mica.edu
ptprd85.mica.edu

Certificate

The complete raw certificate details for discover.mica.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISBNf/tDZG13/6oKDmZDG4dyp9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDkwNjEzMDJaFw0x
OTA0MDkwNjEzMDJaMBwxGjAYBgNVBAMTEWRpc2NvdmVyLm1pY2EuZWR1MIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx/ra4kpb3EkK8ANXxqN+G6qvQy1b
mwiLZWOHSKoaArT4eHtGK5uZe1X3XcnHhfJ5WR7Rk3xHN/F2d5GhihiwoZnHcEtW
t2GyV4WQma1ubX6xyCaXfXZ6S1aR516jsEuflej+pxHUpvNhZQ9JMcbM8abgdLNw
54sfUunh1ph1GaefkmggqFyUm3yDnJgM3R+7HRHTpZps8FsPJ7g2J5cJcvkiYjPa
TlQa9fWMx0ueabdmX5QvpjqXKs6oGf4cAnw6b/GlGPgiiPvxT4fE9FuRbfyhdDqb
63A1WjwbiAIWkQ1+vGvb6GDHEj8C1/wNuV+ESPkvBQQUYEtntpcq8+F6tnktMkcS
qP6nNSKRXKkIiQoVBQsQkTRbapgnIHIOaQ7Y9Pn0cpJWsgScYhAqiTMFcjqvtBjc
xApj+4L3oA+W08n7GnYIoMt07F/epJ6MbimjBFSUik/3pWWLr9uKWd9iVrAdQdUY
tsrOCszukAaB7bChK4rwYbA4PAbr1AeJoBnf/iaAXoGEJkatc7UI090YG6zIokbJ
JyT90SKW6u6TrYdMoJYTv84dZwbFsv0kaeFFYcDklpLbvPZSFrameBo+dy8N1sPF
2+6MR7Sx3Sg6wA2JU81fuIhYFGKxGXrLUl0BKs9K/hPSfd9+WGhl8zThDjZ5WMdC
USPdNnY3Kwtc1eECAwEAAaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
qVGpGrw0Xl7lo5wsL2m2/pMOeOYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFkaXNjb3Zlci5taWNh
LmVkdTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAAB
aDF1Ea8AAAQDAEcwRQIgKk4PS3eZKmPkdNfcuGRSStXAt8YptBTktf4Bti16jcsC
IQChm9/nNkog0yn91GSmaXnorq7Ia9IgVEKmQ00QCNvndwB3ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaDF1EZcAAAQDAEgwRgIhAKKe5wp9hFn4
muqalJ2qtSnCVpmiciH1P0KJpWf1NK2PAiEAtob7y7sxHM1PjaAGyG3FK91egSW6
MJmuZ1SOX9wBBq4wDQYJKoZIhvcNAQELBQADggEBAGAPodGo6nmtXlGheIYRbIf7
gv+JU/fzyv/hmN1tESOAsxcRMefGR1w7OQ31vmTrA5UxPUMBo7doYMx19J4N/7HZ
mqX/KoG2+9TBDC/hDvXBrD9J9Nl8W2yVlUreg0051xdJiZbfVo/hQCuVSCmcTGqT
OJ968GLqRNBgKTuZLBRYkmTCez2BBecSsz2Eo0jooTrqCeARpETt0q0xUqfKO8+O
P1t4DmEmOuDc/p8UuHM5R0SPjievTFtJ5M9y0OYlTBJ6GZPehNpB5EE+4+IN8ypn
t0f2lnklLTwJVTvzct/Sy58Cn5ok40prvOatq4xMLFbTo/OgnpuShTDF+zFBxYg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421949741468265230015118825503712477653629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 06:13:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 06:13:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'discover.mica.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815846822565634241192552399872127439619881341198397490986056815670533326424591364385907354748254430146675979133116531244334257368209828931597191401479899299771849904397412087622523644770244056179673467300828625028783863029795798294541262793882752224493486888980081694015489400943157601922728000827955473452158888409018363888639580836455827776592605823010702434825050989656108276574401511698206173258085156648603926549936053705914124671610703677490470010870143031426012366846105150800293267989834533048526566374829638320112830365180873893794635315729680182947763247942561623291844735252051302969231647584673895040160387323914402511399595947878790516481739067001766017898449230445675004989882130895566275916995342763253636960242325284646783695487534816767114788146261936958223406010024394691561517527128723429245322215246008253988218884694262680747636313346839592093922024946208776141258763482790127329067731987452307933850645062339278899875960262825651254370683441600494513749422749909933198901248440937064387451166336952433908294011701736730658692018474738882369155726617993939028320236233102048684873177069334479440046547325506908041198203087244184835332853354230741901834459390897464201822165501415864180566857899426808478893397473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a951a91abc345e5ee5a39c2c2f69b6fe930e78e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.mica.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000168317511af000004030047304502202a4e0f4b77992a63e474d7dcb864524ad5c0b7c629b414e4b5fe01b62d7a8dcb022100a19bdfe7364a20d329fdd464a66979e8aeaec86bd2205442a6434d1008dbe777007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168317511970000040300483046022100a29ee70a7d8459f89aea9a949daab529c25699a27221f53f4289a567f534ad8f022100b686fbcbbb311ccd4f8da006c86dc52bdd5e8125ba3099ae67548e5fdc0106ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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