logging.appuio.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:6e:aa:1d:3a:05:1d:6d:50:ab:d9:20:a6:53:78:3c:1a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=logging.appuio.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:6e:aa:1d:3a:05:1d:6d:50:ab:d9:20:a6:53:78:3c:1a
Serial Number (int): 271692427165697880442338924239280626220058
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:17:f7:00:e0:0c:7e:16:0a:54:2c:df:48:a7:78:7d:13:2e:3d:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:64:33:72:22:32:f0:ce:a9:72:d2:27:e4:5c:1a:ba:99:ed:61:62
Fingerprint (sha256): 54:d1:c8:c1:aa:03:da:e4:b1:fb:28:25:4d:af:2a:c6:90:be:ac:66:ab:99:54:55:1b:1a:18:82:c9:11:9f:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate logging.appuio.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logging.appuio.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logging.appuio.ch

Other certificates including the domain name appuio.ch

(limited to 100 certificates)
register.appuio.ch
logging.appuio.ch
logging.appuio.ch
letsencrypt.appuio.ch
console.lab.appuio.ch
logging.appuio.ch
charts.appuio.ch
logging.appuio.ch
console.appuio.ch
metrics.appuio.ch
register.appuio.ch
registry.appuio.ch
metrics.appuio.ch
console.appuio.ch
console.appuio.ch
console.appuio.ch
registry.appuio.ch
test.appuio.ch
community.appuio.ch
status.appuio.ch
community.appuio.ch
charts.appuio.ch
registry.appuio.ch
registry.appuio.ch
docs.appuio.ch
forum.appuio.ch
logging.appuio.ch
logging.appuio.ch
registry.appuio.ch
appuio.ch
registry.appuio.ch
console.appuio.ch
console.lab.appuio.ch
register.appuio.ch
letsencrypt.appuio.ch
letsencrypt.lab.appuio.ch
console.appuio.ch
docs.appuio.ch
appuio.ch
registry.appuio.ch
console.lab.appuio.ch
console-lab-aws-eu-central-1.appuio.ch
registry.appuio.ch
registry.appuio.ch
metrics.appuio.ch
registry.appuio.ch
metrics.appuio.ch
metrics.appuio.ch
appuio.ch
appuio.ch
console.appuio.ch
status.appuio.ch
console.appuio.ch
console.lab.appuio.ch
control.vshn.net
console.lab.appuio.ch
register.appuio.ch
registry.appuio.ch
console.appuio.ch
console.appuio.ch
metrics.appuio.ch
logging.appuio.ch
community.appuio.ch
logging.appuio.ch
console.lab.appuio.ch
test.appuio.ch
metrics.appuio.ch
registry.appuio.ch
console.appuio.ch
registry.appuio.ch
console-dcs1.appuio.ch
appuio.ch
metrics.appuio.ch
console.appuio.ch
registry.appuio.ch
docs.appuio.ch
community.appuio.ch
logging.appuio.ch
logging.appuio.ch
console.appdirect-prod.appuio.ch
appuio.ch
status.appuio.ch
console.appuio.ch
console.appuio.ch
console.appuio.ch
appuio.ch
console.appdirect-prod.appuio.ch
logging.appuio.ch
metrics.appuio.ch
appuio.ch
status.appuio.ch
appuio.ch
logging.appuio.ch
status.appuio.ch
console.lab.appuio.ch
console.appuio.ch
status.appuio.ch
console-dcs1.appuio.ch
status.appuio.ch
forum.appuio.ch

Certificate

The complete raw certificate details for logging.appuio.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISAx5uqh06BR1tUKvZIKZTeDwaMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjQwNjUzNTBaFw0x
OTA4MjIwNjUzNTBaMBwxGjAYBgNVBAMTEWxvZ2dpbmcuYXBwdWlvLmNoMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5/wFvJEeIr4v23sYecIwy2oDzE+I
6fpoX49nutAfpsyrlK3jToIaFj7zVXh4dlxOJNci1+9l6nlrNPKA7dbAtwCpJqVN
7LWbfSF9Q8kDFOhf13y/E1XjexFXMsYcdcV8wcLoQhfAwo5JzuYEnOHM4/nXgvGt
PvvRW728QFVZnHxP2wPlcaQqqbxk3AvocoboVh4+IXsC3mwpA9eAyZ96an0tpu/t
i77b6GdXafkJ38jr0H84m/RR5yrJQnys3BQKoLFF21ZHlw6rd8udD7OuRFt4uHEe
VVFz6MJK4VXlAPyHbYtVjtdytLn6rRI1+wC2T9SGJ7ZG8UufZC2j9pU2bgUESTxD
C5qQWy2LeVLzSpbagF4A+d8ZwEGeuDjvDhSwCoMHiQgRLyokSHH9t25VLGAK5eL8
lAy3GNReARr2vaoRI3/yHsZ5pxRsECqQX6f+D/dAIOI2pY00DIfWT9QOuqBRMnXy
TIMJknXWolTX6gLh8PVAXFLBTf9ejXzVbJZ1zOvns+M0DAbi36xT5o3t4W/lQMxU
9ybDpdm623cV5jrfwMDwGL0VKVhc3/kOwIJFcPcFFQNC3rNOaJdGBJa+IhUBonWp
Ihjegqm+nF+NeIcgBQNxcvnv+p3WjvwYVNl45/3g0LKF/0vdgT2CxnlTHbDKhiB+
qIUEttXu251ypysCAwEAAaOCAmYwggJiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
0hf3AOAMfhYKVCzfSKd4fRMuPUQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFsb2dnaW5nLmFwcHVp
by5jaDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB3AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
aujU8qQAAAQDAEgwRgIhAMZGGtPAmlWQItyxE6aART3mbXSznL3wi6uxqCiYT31o
AiEA2SZrya5fVMp0DhbX3FeK4OM/GKBIHPNq4xU6bXwuQqIAdQBj8tvN6DvMLM8L
coQnV2szpI1hd4+9daY4scdoVEvYjQAAAWro1PLCAAAEAwBGMEQCIDgoSFzQJY+w
UWqQtBl+F9m03L6utep5S9Q209P5Kg5BAiAN/C3hdWu134DNE7Z73Jau/TcVWB03
q5g7aEEq0dVIOzANBgkqhkiG9w0BAQsFAAOCAQEAkBnCWA0lUccShgtX55w4vbtp
jSCpflummpmrst1YyQKTr+hN+bftVWrAVrVf+aTU5Tzlq4Z7v1L9YZVTN8OhbB7L
nJvMMJYhgkaEZTkqCvvLduOPNTF7Sznmn4+gS4qst6FnjafVx2xzG8yNG0Q+y05X
YT1RRWcXuWvkpYg0TwzUVBE9g08SqsLV2dYrXC1Z/G/H1NpbVx5PxSavIr7fvDTe
P4JGyd0F2pPyf/2xHUfAlujUyAH5UbNXDtbFsJtekIJ4z61c4F657s4SYMhQTCr9
WpeKHDeXVfDur0TzsZ5iIs/EBPkF/2zRUn+Fxn/m2M6a8fdTUo+76CQ4FX8WDg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271692427165697880442338924239280626220058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-24 06:53:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 06:53:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logging.appuio.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946414036447248744120657938391729327635280120648195118357486659501969035674840915731145340581278162628410868754375847113208686212482296553117375030974557290508441649623491010644120453633628420629646233349200063710379184588236622707498783935480502795947078082649081056943478506983081406463886082057380930209559422415658415124810199320160327441702997256118842678718263769215829591929288839428306010349522700544329445421458382222257404377740785313511277781658708254739137699698699697813018722846293657303223875647888656270227389253881837915283872654069021534257572833873865369016506583652942275515430820097127320067134051365539527941033940908836333108402373635750332295787089812136410890148703076062668061313718811989368527861980277109670358052394006828502580391581081683446029284099548495365869103643914688645143520358843513716966964632952211961511692384044442478122840014691246671360876823108294954542733612632145821156281168172065709907292159020948523650171637372894645746742706489982459459300555509796882991149665141266500701817760976167480788029951006251368337314103045803678165528660503907236409211244487761543294652876426428223677993141725922167676771775170740168191086513953385918620243905857192110248330340128034251653183088427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d217f700e00c7e160a542cdf48a7787d132e3d44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logging.appuio.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ae8d4f2a40000040300483046022100c6461ad3c09a559022dcb113a680453de66d74b39cbdf08babb1a828984f7d68022100d9266bc9ae5f54ca740e16d7dc578ae0e33f18a0481cf36ae3153a6d7c2e42a200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ae8d4f2c2000004030046304402203828485cd0258fb0516a90b4197e17d9b4dcbeaeb5ea794bd436d3d3f92a0e4102200dfc2de1756bb5df80cd13b67bdc96aefd3715581d37ab983b68412ad1d5483b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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