espnsb.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:fd:a8:5c:a6:42:c5:2e:1d:6f:39:a6:14:e3:89:e4 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=espnsb.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:fd:a8:5c:a6:42:c5:2e:1d:6f:39:a6:14:e3:89:e4
Serial Number (int): 19926257831457730294927973139060328932
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 48:9e:da:61:ef:32:2e:44:fd:62:5e:f5:89:c2:73:a1:5e:9f:41:8a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e5:3f:ba:42:a7:0c:f0:d4:58:30:d3:df:48:3a:75:10:b1:47:bc:77
Fingerprint (sha256): 47:a8:51:75:92:37:fe:aa:8a:37:25:16:a7:61:c0:a4:87:61:d7:03:30:dc:16:96:bd:ed:5a:d6:f3:65:a6:37

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate espnsb.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for espnsb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

espnsb.com
*.api.espnsb.com
watch.auth.api.espnsb.com
*.core.api.espnsb.com
site.web.api.espnsb.com
*.espncdn.com
watch.admin.espnsb.com
fan.core.api.espnsb.com
*.partnerpub.espnsb.com
*.espnsb.net
*.fan.api.espnsb.com
*.shortstop.espnsb.com
site.mobile.api.espnsb.com
watch.graph.api.espnsb.com
*.espnsb.com
watch.video.api.espnsb.com
watch.product.api.espnsb.com

Other certificates including the domain name espnsb.com

(limited to 100 certificates)
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
ESPNFuseDevCluster-04.hosted.aws.espnsb.com
dcs7deportes.geo.hosted.espn.com
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
creativearchive.espnsb.com
espnsb.com
internal.espnsb.com
cfa.content.espnsb.com
espnsb.com
kwese.espnsb.com
www.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
*.geo.hosted.espnsb.com
pro.creativearchive.espnsb.com
espnsb.com
espnsb.com
client-api.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
editions.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
internal.espnsb.com
espnsb.com
creativearchive.espnsb.com
*.espnsb.com
www.espnsb.com
www.espnsb.com
espnsb.com
espnsb.com
espnsb.com
editions.espnsb.com
editions.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
client-api.espnsb.com
espnsb.com
*.espnsb.com
editions.espnsb.com
www.malt.internal.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
espnsb.com
espnsb.com
espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
kwese.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
creativestudio.espnsb.com
espnsb.com
www.espnsb.com
*.cms.internal.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
editions.espnsb.com
portal.creativearchive.espnsb.com
*.espnsb.com
www.espnsb.com
*.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
editions.espnsb.com
www.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
www.espnsb.com
www.espnsb.com
www.espnsb.com
ESPNFuseDevCluster04.hosted.aws.espnsb.com
client-api.espnsb.com
espnsb.com
dcs7deportes.geo.hosted.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
www.espnsb.com
espnsb.com
editions.espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
espnsb.com
www.espnsb.com
client-api.espnsb.com
espnsb.com
www.espnsb.com
espnsb.com
espnsb.com
cert-00001-cdnedge-bluemix.akamaized.net
cert-00001-cdnedge-bluemix.akamaized.net

Certificate

The complete raw certificate details for espnsb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHe/C/LEIZ0nC0eeVYV/
D9ynt/+e5DlFIxOya31jiwgpBGGSbOqefBP6502ZhjAmrFZMhn8dfe3DFn+Kwl4X
2N70mnZL0QTBVk6a3TAADSzTjX2yEN7gFadZiOB2Wu1UMvbE/V8BBrX4FZrH8fZK
RBYblAF4n7lVCd5RA9yHvRkeoEqVWnrOqVrHnxXE3TCHxQXwxnb+OUt1x3QArowR
AeucSwV1T1JEGHgaQUXWXjl7W1Hn3kxiHTBCF9URIL4dXOrKuM08Xn2erYfXN81I
ePMGHFM1O6PHI7MAf4Jg3IFVzmbbPKGSD21i5TtyKhDQXoGssC3BXbyW8QDC5IAF
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19926257831457730294927973139060328932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'espnsb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19752224664223324842275794336287056769960579524654652116303557000778612589772418075322466619657052273909204664253935418132420031445716172797461914068215407497597377378328828954226438001709486531097460026268893253287624304455420016020572994037016060091502072941815149075788632669359395674695098952655964930699600804510742701188522138700033818236504915354478281759176279406732216624303211440413511809395696495583170462257426871703520395517958974509725421735993656655398986991803772382715131364479723361013042227218828808158330755657876276416659461340127809229333304797418324570707363327525612428884128844036164288513293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							489eda61ef322e44fd625ef589c273a15e9f418a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.web.api.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.admin.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnerpub.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnsb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortstop.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.mobile.api.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.graph.api.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.video.api.espnsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.product.api.espnsb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016c0716b0df0000040300473045022100924c9b1033fed7e0d793d328035489fefdb6d818708cc15d46470eb34ae022b7022034168c3db7dad91d6d16813f1b2fd8fadd7235316641cd95e18f0192c622158e0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c0716b12f0000040300473045022100920195f592d7daa627e834f6462b89c212a83e11c6a233b5fc7fe9c03621e806022001de862e0e0b6f8e13cc4b8c4a6bc8aa9da22ec7b51837b893ae3a9810325be8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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