mail.unifi.com

- Unifi, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:d4:b6:3f:87:60:6c:5a:19:39:f0:d8:d9:aa:93:70 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Unifi, Inc.

Organization: Unifi, Inc.
State / Province: North Carolina
Locality: Greensboro
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:d4:b6:3f:87:60:6c:5a:19:39:f0:d8:d9:aa:93:70
Serial Number (int): 7750603344753110706607381289135412080
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 73:b8:33:7e:ed:e1:e1:f3:a0:57:68:fc:71:f5:e8:27:ff:7f:2a:14
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 75:f3:08:fb:5d:05:2f:f2:92:e8:2f:4b:2a:1d:2e:e7:a3:07:ab:94
Fingerprint (sha256): 3a:ac:49:73:4b:ef:29:cf:f3:ef:bb:27:88:06:28:16:63:0b:0b:50:36:65:bd:b5:b0:77:73:9f:9f:5a:6a:b4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate mail.unifi.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.unifi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.unifi.com
unifi.com
autodiscover.unifi.com
*.unifi.com

Other certificates including the domain name unifi.com

(limited to 100 certificates)
jobs.nodusearch.com
mail.unifi.com
careers.brevitasconsulting.com
leapfrog-ssl-57.gcs-web.com
careers.brevitasconsulting.com
leapfrog-ssl-57.gcs-web.com
jobs.nodusearch.com
careers.ironflametech.com
careers.brevitasconsulting.com
jobs.erecruiterafrica.com
careers.brevitasconsulting.com
*.unifi.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
leapfrog-ssl-57.gcs-web.com
careers.brevitasconsulting.com
jobs.nodusearch.com
careers.avancercorp.com
jobs.mforchange.org
unifi.com
jobs.nodusearch.com
*.unifi.com
jobs.directhireresource.com
careers.ommincorp.com
careers.ommincorp.com
work.hsbintel.com
career.walser-personal.at
careers.vendeur-afrique.com
careers.unifi.com
unifi.com
careers.avancercorp.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com

e-literature.unifi.com
jobs.nodusearch.com
*.unifi.com
careers.brevitasconsulting.com
jobs.nodusearch.com
careers.avancercorp.com
mail.unifi.com
careers.avancercorp.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.elearnio.com
unifi.com
careers.avancercorp.com
jobs.hackingworld.online
careers.brevitasconsulting.com
careers.brevitasconsulting.com
*.unifi.com
emploi.trylon.ca
careers.brevitasconsulting.com
careers.brevitasconsulting.com
jobs.4sightsolutions.ca
careers.4sightsolutions.ca
careers.brevitasconsulting.com
careers.vendeur-afrique.com
jobs.erecruiterafrica.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
jobs.nodusearch.com
jobs.pauliglesia.com
careers.brevitasconsulting.com
e-literature.unifi.com
e-literature.unifi.com
careers.avancercorp.com
leapfrog-ssl-57.gcs-web.com
*.unifi.com
careers.avancercorp.com
jobs.nodusearch.com
unifi.com
careers.brevitasconsulting.com
careers.avancercorp.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.avancercorp.com
careers.cfabllc.com
careers.avancercorp.com
vagas.topworkrh.com.br
careers.brevitasconsulting.com
careers.vetjobsok.org
careers.avancercorp.com
recruit.imie.fr
*.unifi.com
unifi.com
jobs.simplesolutions.us
jobs.bgawe.info
careers.brevitasconsulting.com
recruit.imie.fr
leapfrog-ssl-57.gcs-web.com
jobs.nodusearch.com
careers.brevitasconsulting.com
e-literature.unifi.com
jobs.nodusearch.com
careers.brevitasconsulting.com

Certificate

The complete raw certificate details for mail.unifi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7750603344753110706607381289135412080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greensboro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unifi, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.unifi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720079978823639949286918528067863451329075249725933343553563686495305605869382995446562725107537036689355436950516643034293318933192412559929610385200766945448843842886720085468587962059067374634169318670985894808384874294404954836503962518257368928493535381355719233469594282197111501965033401126879730894125763553174978606982956916088899369272494887568502611387701949692657806179932455523364653826969732066032153952821608938673951987021816382934804524716198025647642316897418582500209086583583238094795465422937902676723191679687534547415629187880307746074336649433547696488231979211464989194318264733089885335506885233968820494769243217849478079972551592309351284508244845784964723325048510302464448705575361902017877620465307566357866807801607975454761700887163907504691537001699973458626309313556666747448059057370455582972398259759489343132563169153604034838321552719780681474237493142351412211481029298893306449670603646606946186211521770947498170217752101987378393003372711258885466019934246776173648777225662828579315956705589178133562142430610463684797342577183261667951972516144302821465956085615146431210833561425297364455104767643250279700143738966340505126094618494535886834008500879847798999360440428315907880011681567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73b8337eede1e1f3a05768fc71f5e827ff7f2a14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.unifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.unifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unifi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0085d2f9ce0e7dca949b47150d0d6e99f440bdfc67b10e66f7d468cff4d3fe69b00b8b791c2c170be8e0d4725794ad4de444f539a575aa1c0f53311884b8eb3c4c34344d6ee694b89bf7c31b569e6fc3b18a164cdf131227cbd8189e1faf19cff9e4fb388afe59b2accc853eeb29c5ff6d58d390866f9182a3371868d9bf0d536842bbcdf4934f1935dd553dbdd2563d43a75ed29a5bd39d7c598a24e1b1aee2e33513a29352f6d2db3a3a185e606597195390e2cca907f6ada92152d1e46fa3e53672f95c57b0bf0cf2fa550ab12ae8586178488377aa05732c09ae5f0ce066cc1dbb349ac59ff5d2883dac28ec4efa410cf9c0b0b04a2b84008bc770934423a3