www.daitauha.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:aa:f0:c1:ae:34:38:ac:14:58:5e:90:93:28:9c:8a:c9:39 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.daitauha.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:aa:f0:c1:ae:34:38:ac:14:58:5e:90:93:28:9c:8a:c9:39
Serial Number (int): 406617166469159277084499326959460903733561
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6e:82:1c:37:92:8a:9d:a7:99:03:c0:3f:9f:1f:bb:bb:9b:94:e6:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:a4:3f:d5:8b:18:d4:c0:8d:93:80:04:fa:08:25:e9:e8:38:09:99
Fingerprint (sha256): 4c:80:64:33:b1:f1:a6:3e:1d:59:39:98:73:dc:2e:c0:5c:93:a7:80:54:1e:2b:ac:16:24:71:6d:86:36:e2:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.daitauha.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.daitauha.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daitauha.fr
mathieu.daitauha.fr
www.daitauha.fr

Other certificates including the domain name daitauha.fr

(limited to 100 certificates)
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr

Certificate

The complete raw certificate details for www.daitauha.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGeDCCBWCgAwIBAgISBKrwwa40OKwUWF6Qkyicisk5MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTIxMDIyMzRaFw0y
MDAyMTAxMDIyMzRaMBoxGDAWBgNVBAMTD3d3dy5kYWl0YXVoYS5mcjCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAOR3d+tOKLM7C8lTBglYQvh85GTnSPqW
YvVNL7AkKa6xZUmQCpuOo01KMVR0JwqGJhE1FkDNwCCE+yjFdXuNGnpXka81z1jO
QIhzj4+1bk5yUkbnCtEp3DoJ8z4KzfwM0qMYA2VNOo/OF3dA/ZMVUqGkLDBsdI2O
I1WjrBZxcIA7d8cFWdUZHonE2Az9RtmDZnhOyXUNdKmVCQxiSj4bgtJQGYlON0EA
Z8S7T1PO2ZondCt2D+mOXeQgT12Obeo/bQg2GqpAvNR22PfBEvU268nqH7GlNxKM
5E/8+vg84fAKpQ2C3MKm/oAJPh1Q746JRSSoch5yKe0xMb/w4VYMZsk+ckZbdnv/
ZYrOpjR5rlNgy3KNpHDwCpelYOZpKBFy9ENQs2xnwDsXgfPhorUFxPokYeR0FbmI
SYGr1Haxkoh6WFSe0MfpytYX58WGNYkuULbg2rho74TcRIO82I8SPLXU/anVsmlf
WUBb8xsK/eGONSwpS5KXaea1gdLNsAulbAAGSJI3ByFjZqUfIqDMDAkYhD7ihB0o
a1eRvXa26J5HMQKyxvf7c3y4WyVj7mreBNseIIDDq+OI+GfNTupMn21V3ufAWGRy
dmloa02bEeWT1utLhu/5bsj9NbllYf7QYpe47ojYt4TnWUOAzWOOGkqhW2V71mIb
LH/SRITKpVVvAgMBAAGjggKGMIICgjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFG6C
HDeSip2nmQPAP58fu7ublObOMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wPAYDVR0RBDUwM4ILZGFpdGF1aGEuZnKCE21h
dGhpZXUuZGFpdGF1aGEuZnKCD3d3dy5kYWl0YXVoYS5mcjBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2APCVpFny
ANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbl9Z2RYAAAQDAEcwRQIhAIu8
70B83DzHzmQ3KbDp0XCPXlaFUNnDbGUw68r6A1JmAiBZuOsQI525SNJpxk1YYUbL
dxlQGJuKW/jSazSFaoVdpgB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3v
i5BeAAABbl9Z2TcAAAQDAEcwRQIhAJLyx4gaeM0wo/jaW/sxRB9kit43jGSLqw7+
+LDREVOcAiAkrfIkJJLkyNgDBHRQjZqIHeR6xizFDOopcp5uFMWHYTANBgkqhkiG
9w0BAQsFAAOCAQEACR1eU43/PZSeB7rnYzETtJLqHifWj3It9FWhhqZ8Ow4C1X0g
F0671cO71BlfSHQpjGMDZRZ8mB2C1iI60wEUBOS1iXgo0809wK8WARjDmL5NlhWW
5RLAn8RB4acTTBBBZLG63CXVJ8KQWjbK1a/KzMHPkbzM4QPPN2AjcnVNNsZe5asv
BKGYeJs8EAuplRg1p9uJUz0d6SAOzhTUmyRJ/usuSahT0IQRcSdYNEFVwKHKuQBU
wx+9OpcmvOVEYOAhk5MVub1j1ZQ92YR6vLMYISJVKnchSDh8gAA7OZMA29dzimX9
Kjj/yLJi67CweBWUom7JJTtEoZVwShMErt/FCg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406617166469159277084499326959460903733561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 10:22:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 10:22:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.daitauha.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 932062709574986891174929415422534833661913882971229610292015760001931952236845672658791462993216130398016007488618158654222200280617096325688654311927336509159544606030481543495587216788806306681067985886675658384434704754611058801743056379039572877109888121630768010684516911386952763595911110306751613181747653097670221673370569784041163478852642796536076712680012850741595392783829939048266502699570915629807689902830578675843818372815117289472897045378797746992988298810128824046659716054951552458352771718837637145610003537853011593512426643434419140561487339784406230996025148600366693361299475296083414635926481290093311789838895778542438910931260327657974269070628157514415963168019829957829219373645613138851214344706732103546478275765991511760413836918598575818663738254604316752275333299163539397791344961267342575594024295737002551663374271203961043622803306714366349960163735834151088064898797471873588944065044912263541567946362349622394890358903078450517241959103735650843292393596741175435092110267538438949612152892191469045949194417548031175812415866906622595286237723231051602468277044996082888861159809635938717512850094620717995450116179208434241348466306234143746353255258415501270411998002351033430560534254959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e821c37928a9da79903c03f9f1fbbbb9b94e6ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathieu.daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daitauha.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e5f59d91600000403004730450221008bbcef407cdc3cc7ce643729b0e9d1708f5e568550d9c36c6530ebcafa035266022059b8eb10239db948d269c64d586146cb771950189b8a5bf8d26b34856a855da6007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e5f59d937000004030047304502210092f2c7881a78cd30a3f8da5bfb31441f648ade378c648bab0efef8b0d111539c022024adf2242492e4c8d8030474508d9a881de47ac62cc50cea29729e6e14c58761
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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