*.cmuintra.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 39:fa:38:e1:50:ab:c0:1d:34:09:2b:ac:99:65:73:52:7c:37:db:dd was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 39:fa:38:e1:50:ab:c0:1d:34:09:2b:ac:99:65:73:52:7c:37:db:dd
Serial Number (int): 330992615195366263413607267280214850196041358301
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 92:d1:43:c5:0f:62:d2:30:8d:e0:d8:04:08:e7:67:91:cb:98:2e:85
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 4d:d4:6c:92:74:bc:72:ae:33:ed:32:31:af:c4:9f:ba:13:ce:59:40
Fingerprint (sha256): 61:0f:c7:14:93:4c:3a:f2:04:91:74:ec:cb:f8:b7:b0:0c:80:7c:54:09:43:e2:1f:bd:66:8c:e7:56:45:47:fd

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate *.cmuintra.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cmuintra.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cmuintra.ch
cmuintra.ch

Other certificates including the domain name cmuintra.ch

(limited to 100 certificates)
optimus.cmuintra.ch
*.cmuintra.ch
*.cmuintra.ch
*.intra-test.cmuintra.ch
*.intra-pre.cmuintra.ch
*.intra-dev.cmuintra.ch
*.intra-test.cmuintra.ch
*.inter-test.cmuintra.ch
*.inter-pre.cmuintra.ch
*.inter.cmuintra.ch
*.cmuintra.ch
optimus-pre.cmuintra.ch
te2-malt-login.cmuintra.ch
*.test.cmuintra.ch
optimus.cmuintra.ch
*.inter-pre.cmuintra.ch
*.inter-pre.cmuintra.ch
*.inter-dev.cmuintra.ch
*.test.cmuintra.ch
*.inter-test.cmuintra.ch
optimus-pre.cmuintra.ch
*.intra.cmuintra.ch
*.inter-test.cmuintra.ch
optimus-pre.cmuintra.ch
*.cmuintra.ch
*.intra-test.cmuintra.ch
te2-malt-login.cmuintra.ch
*.inter.cmuintra.ch
*.inter-test.cmuintra.ch
*.cmuintra.ch
*.test.cmuintra.ch
*.intra.cmuintra.ch
*.intra.cmuintra.ch
*.intra-dev.cmuintra.ch
*.intra-test.cmuintra.ch
optimus-pre.cmuintra.ch
*.test.cmuintra.ch
*.inter-dev.cmuintra.ch
*.inter-pre.cmuintra.ch
*.intra-pre.cmuintra.ch
optimus-pre.cmuintra.ch
*.intra.cmuintra.ch
prd-malt-login.cmuintra.ch
*.intra-dev.cmuintra.ch
*.cmuintra.ch
*.intra.cmuintra.ch
*.inter.cmuintra.ch
optimus-pre.cmuintra.ch
*.intra-dev.cmuintra.ch
*.inter-pre.cmuintra.ch
*.inter.cmuintra.ch
*.inter.cmuintra.ch
*.inter.cmuintra.ch
*.cmuintra.ch
*.intra-test.cmuintra.ch
*.test.cmuintra.ch
*.inter-pre.cmuintra.ch
*.inter-test.cmuintra.ch
*.intra-dev.cmuintra.ch
prd-malt-login.cmuintra.ch
optimus-pre.cmuintra.ch
*.intra-test.cmuintra.ch
*.inter-pre.cmuintra.ch
*.inter-test.cmuintra.ch
*.inter-pre.cmuintra.ch
*.intra-pre.cmuintra.ch
*.inter-test.cmuintra.ch
te2-malt-login.cmuintra.ch
*.inter-test.cmuintra.ch
*.intra-pre.cmuintra.ch
*.inter.cmuintra.ch
*.cmuintra.ch
*.intra-pre.cmuintra.ch
*.intra.cmuintra.ch
*.inter-dev.cmuintra.ch
*.inter-dev.cmuintra.ch
*.test.cmuintra.ch
*.inter-dev.cmuintra.ch
*.inter.cmuintra.ch
*.intra-test.cmuintra.ch
*.intra-dev.cmuintra.ch
*.inter-test.cmuintra.ch
*.inter-test.cmuintra.ch
*.intra-pre.cmuintra.ch
*.intra-pre.cmuintra.ch
*.intra.cmuintra.ch
*.intra.cmuintra.ch
*.inter.cmuintra.ch
*.test.cmuintra.ch
*.inter-pre.cmuintra.ch
*.inter-dev.cmuintra.ch
*.inter-pre.cmuintra.ch
*.inter-pre.cmuintra.ch
prd-malt-login.cmuintra.ch
te2-malt-login.cmuintra.ch
*.inter.cmuintra.ch
*.intra-pre.cmuintra.ch
*.inter-dev.cmuintra.ch
*.cmuintra.ch
*.intra-pre.cmuintra.ch

Certificate

The complete raw certificate details for *.cmuintra.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330992615195366263413607267280214850196041358301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 14:27:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-14 14:27:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cmuintra.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757773488184316446926534079697868220372509972499029843095918595558549141862628920925310205855839851629169647555994275996091611647420798830755820447411311473421347700399585704854771643991923309678373251530611630302933666643070138749264728190611496660208700101306727559074905004128867042614081442967341728342447479391737358414965544501540788239205503482781864776332989120380572118705988205960754552052973145834648903689546207480662597871283194192489214637097039435016412833892768894340270539541697411756872063746716031809758960561724710615573683235047088719729225704458357855142561329248903456001351794124933688106454702726890405537601013958811438919561449067089736621258918951090695230803940902457004099897621164721860172357639699106147561087670612127334054240363204129473419285578248989702617826621681972932355416416426875167359666141792998536193517296467595536529914586093394462948404677612903845201403990458992006922015542581031892764894099480605188834427555406995866586659260610325501764398274135355862732465503477237833344394074689434889218058780914717101534604108152512088434538046489200176847959513168246259979139006387560045479547794985009391639343587779523712857978290670248106362089657847129633908802950273420342142442925813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmuintra.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmuintra.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92d143c50f62d2308de0d80408e76791cb982e85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (599 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER asn1: structure error: integer not minimally-encoded
<nil>
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 44718067043343083141659854520777169359343457824894064312243615302892924829706
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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