www.positivepractices.com
Issued by R3
About this certificate
This digital certificate with serial number 03:10:aa:b5:16:70:14:2c:81:ee:ab:6f:3f:94:34:8e:56:36 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.positivepractices.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:10:aa:b5:16:70:14:2c:81:ee:ab:6f:3f:94:34:8e:56:36Serial Number (int): 267008284686123394845934903070899934484022
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8c:45:55:bb:9f:1e:28:f8:3e:cc:b4:28:08:17:e1:c8:66:ae:2c:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9f:d2:ee:69:9f:35:b0:de:51:77:9f:59:ec:ca:cf:11:05:fc:57:9e
Fingerprint (sha256): 52:33:92:2b:95:9f:dd:cc:56:49:38:fb:4b:59:d6:01:e7:1c:c0:cd:0d:d4:2d:64:a9:b8:63:ab:32:0f:9f:55
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.positivepractices.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.positivepractices.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.dreamtasker.on-rev.com
mail.positivepractices.com
positivepractices.com
www.alejandrabhasin.dreamtasker.on-rev.com
www.auraphysicaltherapy.dreamtasker.on-rev.com
www.nativenews.dreamtasker.on-rev.com
www.positive.dreamtasker.on-rev.com
www.positivepractices.com
mail.positivepractices.com
positivepractices.com
www.alejandrabhasin.dreamtasker.on-rev.com
www.auraphysicaltherapy.dreamtasker.on-rev.com
www.nativenews.dreamtasker.on-rev.com
www.positive.dreamtasker.on-rev.com
www.positivepractices.com
Other certificates including the domain name positivepractices.com
(limited to 100 certificates)
positivepractices.com
positivepractices.com
human-rights.positivepractices.com
education.positivepractices.com
data.positivepractices.com
civil-rights.positivepractices.com
data.positivepractices.com
education.positivepractices.com
education.positivepractices.com
positivepractices.com
www.positivepractices.com
ald4all.positivepractices.com
equity.positivepractices.com
education.positivepractices.com
positivepractices.com
ald4all.positivepractices.com
nmevaluators.positivepractices.com
education.positivepractices.com
positivepractices.com
education.positivepractices.com
data.positivepractices.com
dreamtasker.on-rev.com
www.tlc.positivepractices.com
nmcpp.com
positivepractices.com
www.ald4all.positivepractices.com
www.positivepractices.com
data.positivepractices.com
equity.positivepractices.com
positivepractices.com
data.positivepractices.com
positivepractices.com
data.positivepractices.com
nativenews.dreamtasker.on-rev.com
lwe.positivepractices.com
data.positivepractices.com
ald4all.org
equity.positivepractices.com
ald4all.positivepractices.com
civil-rights.positivepractices.com
positivepractices.com
positivepractices.com
positivepractices.com
human-rights.positivepractices.com
education.positivepractices.com
data.positivepractices.com
civil-rights.positivepractices.com
data.positivepractices.com
education.positivepractices.com
education.positivepractices.com
positivepractices.com
www.positivepractices.com
ald4all.positivepractices.com
equity.positivepractices.com
education.positivepractices.com
positivepractices.com
ald4all.positivepractices.com
nmevaluators.positivepractices.com
education.positivepractices.com
positivepractices.com
education.positivepractices.com
data.positivepractices.com
dreamtasker.on-rev.com
www.tlc.positivepractices.com
nmcpp.com
positivepractices.com
www.ald4all.positivepractices.com
www.positivepractices.com
data.positivepractices.com
equity.positivepractices.com
positivepractices.com
data.positivepractices.com
positivepractices.com
data.positivepractices.com
nativenews.dreamtasker.on-rev.com
lwe.positivepractices.com
data.positivepractices.com
ald4all.org
equity.positivepractices.com
ald4all.positivepractices.com
civil-rights.positivepractices.com
positivepractices.com
positivepractices.com
Certificate
The complete raw certificate details for www.positivepractices.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAxCqtRZwFCyB7qtvP5Q0jlY2MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTgyMTUzNTVaFw0yNDAyMTYyMTUzNTRaMCQxIjAgBgNVBAMT GXd3dy5wb3NpdGl2ZXByYWN0aWNlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFlMSStL9tkVU/UhPInyIJqJf4bO61fAGL3tRNJChQCxbhT21Y v2RwzBSVyZpX2TzEM3BVM76hTZDYsxyVfqL45kEwgj0SCArLhsFgbNrx0pG1IRK6 8vZujpZEcCppuS57Y3hlo8jueEUHjkqNodUs123r1ovEkcWW7o3Oc7+NFU2bKVxx 9TRX2UyWhF6+Ztrn/EG9dClPhdv2Warp8Xo/PmoxtCsH7ISGREKsUVzw35AHU8OV JEvTQuAe2LtVnbL1RlDpq40XLg9JPIICNMbAJ94YQN83jMbGSl5qAPGKoD7VSy7G usCw2uevclzX/voafuKucBOykWz7HbuC/N7rAgMBAAGjggMVMIIDETAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFIxFVbufHij4Psy0KAgX4chmriy4MB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMIIBHQYDVR0RBIIBFDCCARCCGCouZHJlYW10YXNrZXIub24t cmV2LmNvbYIabWFpbC5wb3NpdGl2ZXByYWN0aWNlcy5jb22CFXBvc2l0aXZlcHJh Y3RpY2VzLmNvbYIqd3d3LmFsZWphbmRyYWJoYXNpbi5kcmVhbXRhc2tlci5vbi1y ZXYuY29tgi53d3cuYXVyYXBoeXNpY2FsdGhlcmFweS5kcmVhbXRhc2tlci5vbi1y ZXYuY29tgiV3d3cubmF0aXZlbmV3cy5kcmVhbXRhc2tlci5vbi1yZXYuY29tgiN3 d3cucG9zaXRpdmUuZHJlYW10YXNrZXIub24tcmV2LmNvbYIZd3d3LnBvc2l0aXZl cHJhY3RpY2VzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkC BAIEgfQEgfEA7wB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB i+SkAR8AAAQDAEcwRQIhAJ3eUN2vq617PDDqNtHJYL6ph+Uz1th1OTdCVEUzFjm2 AiBbfPb0D2p7BTVctWnE7OjASucSQXyO62xRetAy5N82qgB1AHb/iD8KtvuVUcJh zPWHujS0pM27KdxoQgqf5mdMWjp0AAABi+SkAWgAAAQDAEYwRAIgUNGq//pHzrhB eP21/OHUpZ8WuT/XcixSQnIjQUikd6sCIA389+AiemKzhXYspafw9FbuhkDg1MEF 59PECTiYJMGZMA0GCSqGSIb3DQEBCwUAA4IBAQBxkuSQbvUdYPjocc+FfjaRwUj/ ECB+x+JmDLh9T+kCcpVG8WHSO+HiOKZ+R+2LFH19/ssfLmx8L9ykQRTJ1zHpzums C5YGZ1Tzut2Y4+cqGEP+I7KChw4mqPBok/Wl3Z3a8cCFCClufQX254yhjepe5R1C yu8g0m8lC4ZWMOZBBhzZ/7oMmgx8Tzm325gIBb6Jwz7/8eWDcSLL1LZ8U6ZHLxg/ T0cgWNZa8GcXiUtFRH39+RPnNV455UuzxSCF1btiV1D79sxw71DijAWqSAhB74Q3 TQw2B4RcVXgQ+m9xP8APqVwzD3fEd57nAV3HSVTn5KIUf4jA3kAP33hileGE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZTEkrS/bZFVP1ITyJ8i CaiX+GzutXwBi97UTSQoUAsW4U9tWL9kcMwUlcmaV9k8xDNwVTO+oU2Q2LMclX6i +OZBMII9EggKy4bBYGza8dKRtSESuvL2bo6WRHAqabkue2N4ZaPI7nhFB45KjaHV LNdt69aLxJHFlu6NznO/jRVNmylccfU0V9lMloRevmba5/xBvXQpT4Xb9lmq6fF6 Pz5qMbQrB+yEhkRCrFFc8N+QB1PDlSRL00LgHti7VZ2y9UZQ6auNFy4PSTyCAjTG wCfeGEDfN4zGxkpeagDxiqA+1UsuxrrAsNrnr3Jc1/76Gn7irnATspFs+x27gvze 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 267008284686123394845934903070899934484022 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 21:53:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 21:53:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.positivepractices.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24942306246004205880457670572183556094125451004311211336818359565341874737499114229753073462272667566708765569637175273984916311310024338667041245622044862820724208489275504483023271460945532592880301169181300725384621167062088257350855532998285904450449106350919207547474330025600934111225240346772522118926734538504151308386457799373257141473033218626464655280761673398295820714454849351148551385525165053609654463021748899193418997340825135965422749241432483360139249268553103556274900191626754381036594109688507406493669789040989639568139964736874195138564394744536421850228568690610513799124737867501857589223147 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8c4555bb9f1e28f83eccb4280817e1c866ae2cb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamtasker.on-rev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.positivepractices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'positivepractices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alejandrabhasin.dreamtasker.on-rev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auraphysicaltherapy.dreamtasker.on-rev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativenews.dreamtasker.on-rev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.positive.dreamtasker.on-rev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.positivepractices.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be4a4011f00000403004730450221009dde50ddafabad7b3c30ea36d1c960bea987e533d6d8753937425445331639b602205b7cf6f40f6a7b05355cb569c4ece8c04ae712417c8eeb6c517ad032e4df36aa00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be4a401680000040300463044022050d1aafffa47ceb84178fdb5fce1d4a59f16b93fd7722c524272234148a477ab02200dfcf7e0227a62b385762ca5a7f0f456ee8640e0d4c105e7d3c409389824c199 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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