digipoort.facet-accountants.nl

- FACET Accountants en Adviseurs B.V. -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 25:8f:da:8b:6a:4a:6f:18 was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FACET Accountants en Adviseurs B.V.

Company registration number: 00000003241233190000
Organization: FACET Accountants en Adviseurs B.V.
State / Province: Zuid-Holland
Locality: Capelle aan den IJssel
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 25:8f:da:8b:6a:4a:6f:18
Serial Number (int): 2706622193391529752
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 20:c8:3c:ce:97:16:a4:3d:4c:32:da:20:33:29:50:10:a8:40:ae:e9
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): 72:ae:57:3b:d1:7e:c4:bd:5f:0f:d8:73:91:47:4d:ac:c0:ec:fe:2c
Fingerprint (sha256): 59:56:5b:0a:92:22:d2:c6:24:8a:6d:5f:f2:e5:fb:5a:96:1a:70:a9:fa:76:35:f7:c1:d9:90:4f:5d:3b:5b:d6

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate digipoort.facet-accountants.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digipoort.facet-accountants.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digipoort.facet-accountants.nl

Other certificates including the domain name facet-accountants.nl

(limited to 100 certificates)
jeremiahgrande.com
liberoantoniooropallo.com
www.miguelblanca.com
fretboard-navigator.com
pi.delivery
ciberlegaltech.com
school-payments.childpilot.com
app.br.shopcall.io
facet-accountants.nl
www.gym-grid.com
admin.redthemes.net
yulingo.app
spiritualstudio.in
othandoprojects.daveyton.org
ks.com.pe
hanumanth.live
app-stg.fg.live
derrotalacrisis.criptan.es
refuellabz.com
prototypekit.com
agmikhaylenko.ru
facet-accountants.nl
www.dev.serviceprovider.woonig.app
app1.lottoandroid.com
facet-accountants.nl
linycv19yoyaku.com
kevin-leach.com
shivaagencies.commshell.com
321-interiors.com
actionnaire-dev.monjuridique.infogreffe.fr
www.massimomarra.com
facet-accountants.nl
clu-mo.com
school-payments.childpilot.com
playground.powerve.cloud
raiseandwin.com
hkf-company.com
app.dev.boldrancher.com
classroom.puc.edu.kh
authclientdev.propelledbrandsdev.com
fitring.nl
caeruleus.tehfreak.com
mvpenthouse.com
www.facet-accountants.nl
platform.srimexogc.com
fides-credito.terramagna.com.br
moontracer.xyz
croom.xyz
www.facet-accountants.nl
www.tibas.media
digipoort.facet-accountants.nl
v911pro.com
www.noelchong.com
www.masterelectricalengg-repairing.com
bias.visual-literacy.org
blossoms.la
web.getclustered.app
happy88.vip
letscan.it
lascandelassf.com
www.pushpak-palladium.com
acclearning.ncgm.go.jp
www.tws.cx
full35.informationimages.net
facet-accountants.nl
www.haagakuppi.fi
timecraft.cloud
eadv.in
www.axel65.com
portal.facet-accountants.nl
www.foxpaint.se
facet-accountants.nl
link.minesweeper.world
millionways.life
baronacentrs.lv
tulukalaplata49.turnosweb.app
www.toasterjokes.com
www.truestory.show
www.convertman.com
girondins.bfsp.app
www.shamsasil.site
ticket.yuzuyou.com
coven888.com
dylanvarghese.com
makeyourmenu.de
www.facet-accountants.nl
vendo-money.touchtech.com
register.ivis.my
propuesta-tramo.cajalosandes.cl
bhyn.dev
shivaagencies.commshell.com
order.flexline.app
excitinglife.ph
www.skowbostaufferwedding.com
www.easelinked.com
costopiatto.com
wangquan.me
www.investhumber.com
facet-accountants.nl
www.teratac.com

Certificate

The complete raw certificate details for digipoort.facet-accountants.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNpP6GjKff6Z9cH1BcFa
kQ2CBQX75Zfr9XZqzMHFgPhR04nhGiaXf9nEtNSy2ghIeIjWSty8GgGONQJCgSwB
pa5SlU5aHhkoh1KkOLMC2x9Amz+U+5FvZWxzPq9wlOCnuHErHLL0j9abmpyr/av+
U9U92jM7zLMMm+1yALEktj15MvLdtshomPmiX3DniGRE/VZoQAJK6BgcJl1MwZPU
w4fNXr2LiG0hGMVx+HZ6MaLgcQgCnCCX+LTP8Ez3v6R3yiVSpKTCK8toCp4LkrHD
gY3EulG65k+C9g+8FPbTQYENsSZyi5mh+YRmBftf0TPBI0/JwFSAN83eVvDsZZI6
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2706622193391529752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 12:50:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-13 12:50:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Capelle aan den IJssel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FACET Accountants en Adviseurs B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003241233190000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'digipoort.facet-accountants.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18285969643673155794022361856542736751280411308060511968702985497480686434477769310435622267351367389872351941922462822960094181957322440411433329130323426893432278223016808037602659309581760959500657994919972832985359138926903950187301355584023504437580058889874570669686194035160258981494123664374326147307136179227439154074639557984940357447260541187885026967199055841767770870436390397705445340495505897836915668867121913020988446054885812492516158480673990693007765430526874678029122882052552050063739533774393956447668884236739442212848198629582839128321832774024892378955602404004509734965515851050194484476531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20c83cce9716a43d4c32da2033295010a840aee9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digipoort.facet-accountants.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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