CHWS3230.geico.net

- GEICO -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 07:5d:04:dd:a1:7f:ba:90:8a:4d:c4:ab:d0:d7:f3:e6:8d:3b:35 was issued on by Trustwave Holdings, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GEICO

Organization: GEICO
State / Province: Maryland
Locality: Chevy Chase
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:5d:04:dd:a1:7f:ba:90:8a:4d:c4:ab:d0:d7:f3:e6:8d:3b:35
Serial Number (int): 164208314708773258564186906848268676659755829
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 20:4f:61:47:39:84:df:62:1d:df:24:3b:86:b1:77:ca:f8:4b:f3:d3
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): 10:6f:52:83:7b:04:3f:0b:e1:82:4e:06:e6:c2:bc:01:bd:21:68:0d
Fingerprint (sha256): 5d:31:66:4f:9b:a4:c1:3a:58:c8:d9:83:9c:03:73:32:04:36:29:a4:79:f0:bb:b7:4f:9b:45:8e:0c:28:3a:23

Issuing Certificate URL: http://certs.securetrust.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.securetrust.com/
CRL Distribution Point: http://crl.securetrust.com/OVCA2_L1.crl

Check the revocation status for certificate CHWS3230.geico.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CHWS3230.geico.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

CHWS3230.geico.net
autodiscover.geico.com
plazamail2016.geico.net
mail.geico.com
fredmail2016.geico.net
mailint.geico.net

Other certificates including the domain name geico.net

(limited to 100 certificates)
Plazamail2016.geico.net
frws2682.geico.net
FRWS7845.geico.net
FredMail2016.geico.net
telpdchvg01.anc.geico.net
CHWS7104.geico.net
CHWS7103.geico.net
phrpd6slb11.geico.net
CHWS7102.geico.net
FredMail2016.geico.net
CHWS7102.geico.net
telpdchvg02.anc.geico.net
CHWS7102.geico.net
CHWS7104.geico.net
cavemail.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
FRWS4732.geico.net
Plazamail2016.geico.net
FRWS4731.geico.net
CHWS7103.geico.net
telexabvg01.anc.geico.com
FRUA9173.geico.net
gfs.private.geico.com
FRWS4732.geico.net
Plazamail2016.geico.net
CHWS3227.geico.net
Plazamail2016.geico.net
gfsnp.private.geico.com
FredMail2016.geico.net
FredMail2016.geico.net
FredMail2016.geico.net
FRWS7845.geico.net
CHWS3227.geico.net
rdspd1chweb01.geico.net
gfs.private.geico.com
FRWS7847.geico.net
FRWS4731.geico.net
mail.geico.com
CHWS7103.geico.net
telpddavg02.anc.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
telpdabvg01.anc.geico.net
FRUA9171.geico.net
FRWS4731.geico.net
FRWS7847.geico.net
FRWS7845.geico.net
FRWS7846.geico.net
packageregistry-np.geico.net
FredMail2016.geico.net
mail.geico.com
mail.geico.com
FRWS7845.geico.net
FRUA9171.geico.net
CHWS7102.geico.net
CHWS3230.geico.net
voltage-pp-0000.private2.geicoddc.net
gfsnp.private.geico.com
CHWS7103.geico.net
CHWS7103.geico.net
FRWS7847.geico.net
telpddavg01.anc.geico.net
PLUA9175.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
Plazamail2016.geico.net
logoncop.geico.net
FredMail2016.geico.net
PLUA9172.geico.net
telpdabvg02.anc.geico.net
*.ise.geico.net
CHWS7104.geico.net
gfs.private.geico.com
FRWS7846.geico.net
FredMail2016.geico.net
*.ise.geico.net
kashmail.geico.net
telexabvg01.anc.geico.com
gfs.private.geico.com
FRWS4733.geico.net
FRWS7846.geico.net
telexabvg01.anc.geico.com
telpddavg01.anc.geico.net
FRUA9171.geico.net
FRWS7845.geico.net
telexabvg02.anc.geico.com
PLUA9176.geico.net
*.ise.geico.net
telpddavg01.anc.geico.net
telpddavg02.anc.geico.net
FRWS7846.geico.net
Plazamail2016.geico.net
FRWS7845.geico.net
*.ise.geico.net
FRWS7847.geico.net
CHWS7104.geico.net
gfsnp.private.geico.com

Certificate

The complete raw certificate details for CHWS3230.geico.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cOk7DUkGoVqNt1k4qbk
BzZzzwP500dpkj+g7IDXCrTnZRtsm7+QRejcL+aGsMt6RicKszj/w/rcR6fj9JZJ
LCdsSaoT4QN97nZE0kU0NEm1vrhAij4t6K0ORs0t08FKD2mL2yDPkoV7gCSZQvHc
NoMiXvvOr3lDDPJ3PSKTvA9QyybsxUNv/3ii77dgYWxjAIvZ2f33MVAzxiMtYHs7
4FZ/AszlI1oyXJvIfoh6bO4dSa7SU2G9r7KJF0gAfxcfzjbolEeKzqi2TVEQwGa5
iZV69fzPCURVLpOQ3nRWpjkcN0oM7OIRpRQwtSOqHxztnVMRFG3RUN1A1Gb9KfKG
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164208314708773258564186906848268676659755829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-13 08:12:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 08:11:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHWS3230.geico.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEICO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chevy Chase'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27995141162639031853530319717849105315415579323138075068014595809674581997981702901832008922125261307578359765049972570170068915608734664671242122796771796989818269964549345653414963859145441506343997391478359723878552749876750111390257180635691577268054571201634356838666140032277809130708493134554291831421741139982113555790617926858016729757349837554017099240267928979181830220201478074254616439933078077017489683301616183677235527779826672736404956650188342721813826077965023483819535395655876987462556763068274440539721650744149008111874471695528357342992053760803305809664684961340596850758061167795479111698039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							204f61473984df621ddf243b86b177caf84bf3d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certs.securetrust.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CHWS3230.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.geico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plazamail2016.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.geico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredmail2016.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailint.geico.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.securetrust.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.securetrust.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.securetrust.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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