FRWS4731.geico.net

- GEICO -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 07:18:e8:80:db:39:1b:e4:8b:2f:6a:e4:11:cf:33:c0:8d:c3:ce was issued on by Trustwave Holdings, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GEICO

Organization: GEICO
State / Province: Maryland
Locality: Chevy Chase
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:18:e8:80:db:39:1b:e4:8b:2f:6a:e4:11:cf:33:c0:8d:c3:ce
Serial Number (int): 158275028040657045360794368299106063155577806
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 9c:6f:0b:d5:df:e8:1c:b8:a6:d2:71:15:8f:20:b2:8d:bf:3e:ae:2f
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): 6e:f6:c6:7b:75:e2:bc:8f:dc:90:5e:59:72:0b:3b:c6:e8:1a:84:2b
Fingerprint (sha256): 55:05:c2:5d:e0:da:53:b5:47:af:e5:0d:a0:c9:ca:88:bc:b9:44:24:f4:81:87:36:93:dd:80:89:e8:70:04:c4

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate FRWS4731.geico.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for FRWS4731.geico.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

FRWS4731.geico.net
autodiscover.geico.com
plazamail2016.geico.net
mail.geico.com
fredmail2016.geico.net
mailint.geico.net

Other certificates including the domain name geico.net

(limited to 100 certificates)
Plazamail2016.geico.net
frws2682.geico.net
FRWS7845.geico.net
FredMail2016.geico.net
telpdchvg01.anc.geico.net
CHWS7104.geico.net
CHWS7103.geico.net
phrpd6slb11.geico.net
CHWS7102.geico.net
FredMail2016.geico.net
CHWS7102.geico.net
telpdchvg02.anc.geico.net
CHWS7102.geico.net
CHWS7104.geico.net
cavemail.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
FRWS4732.geico.net
Plazamail2016.geico.net
FRWS4731.geico.net
CHWS7103.geico.net
telexabvg01.anc.geico.com
FRUA9173.geico.net
gfs.private.geico.com
FRWS4732.geico.net
Plazamail2016.geico.net
CHWS3227.geico.net
Plazamail2016.geico.net
gfsnp.private.geico.com
FredMail2016.geico.net
FredMail2016.geico.net
FredMail2016.geico.net
FRWS7845.geico.net
CHWS3227.geico.net
rdspd1chweb01.geico.net
gfs.private.geico.com
FRWS7847.geico.net
FRWS4731.geico.net
mail.geico.com
CHWS7103.geico.net
telpddavg02.anc.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
telpdabvg01.anc.geico.net
FRUA9171.geico.net
FRWS4731.geico.net
FRWS7847.geico.net
FRWS7845.geico.net
FRWS7846.geico.net
packageregistry-np.geico.net
FredMail2016.geico.net
mail.geico.com
mail.geico.com
FRWS7845.geico.net
FRUA9171.geico.net
CHWS7102.geico.net
CHWS3230.geico.net
voltage-pp-0000.private2.geicoddc.net
gfsnp.private.geico.com
CHWS7103.geico.net
CHWS7103.geico.net
FRWS7847.geico.net
telpddavg01.anc.geico.net
PLUA9175.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
Plazamail2016.geico.net
logoncop.geico.net
FredMail2016.geico.net
PLUA9172.geico.net
telpdabvg02.anc.geico.net
*.ise.geico.net
CHWS7104.geico.net
gfs.private.geico.com
FRWS7846.geico.net
FredMail2016.geico.net
*.ise.geico.net
kashmail.geico.net
telexabvg01.anc.geico.com
gfs.private.geico.com
FRWS4733.geico.net
FRWS7846.geico.net
telexabvg01.anc.geico.com
telpddavg01.anc.geico.net
FRUA9171.geico.net
FRWS7845.geico.net
telexabvg02.anc.geico.com
PLUA9176.geico.net
*.ise.geico.net
telpddavg01.anc.geico.net
telpddavg02.anc.geico.net
FRWS7846.geico.net
Plazamail2016.geico.net
FRWS7845.geico.net
*.ise.geico.net
FRWS7847.geico.net
CHWS7104.geico.net
gfsnp.private.geico.com

Certificate

The complete raw certificate details for FRWS4731.geico.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGH4tR4bdatBVmvp1fQX
vk/us0efZfErQPTBVkPJCAyURbdQvTXWWSc3J6e7ghAgVmQbeHSuyEH4vzlyUbl9
1F7UryZO4i/vrkLqSnZdsYaugw+HUKw6S7Sa20qSLu2aww8fbUN/QHLdkid8UMCR
7g59Z83nEBieliZGPGYJQmmUjtysmNtjSwE0FwbRLP4H6JCSKZizeCGZkYpAJmeS
SlcBMyvuHkIJW0zgI02//s19Azo/2X2NAIVdC932SdYB1AngQ5rLZv3MVaCqCPC5
b2zpUrxT/eG7I0WjiD0A/b/rZ3e8z14SVlUSHu/R9+dTvZtpSEiEedC5Qxho2t2l
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158275028040657045360794368299106063155577806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 14:51:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-25 20:51:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FRWS4731.geico.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEICO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chevy Chase'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23781112887588888469186877128599301658688726327178563597806157463334923869815813350544627936789293895361162146229141281644126559734638357272918555067179551010265829256380230640637858772054301399077459255438633620221918488259790056172882658820550087472405464727551714560978303136869096231375544044085313118361199169056909196681343440525787118784908878238359376923945195638562605608358185273115754707724263643695889962757289619548206779628619947987402633738086354801568808723045761806722178116789199040731157790196490255100035454227687513319704334818963122898355864607866796428992938457480312948683961476583536579159447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c6f0bd5dfe81cb8a6d271158f20b28dbf3eae2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'FRWS4731.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.geico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plazamail2016.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.geico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredmail2016.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailint.geico.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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