www.ref-aarau.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:82:17:1e:1d:27:40:86:83:be:b6:46:f6:1b:2c:56:a7:19 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ref-aarau.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:82:17:1e:1d:27:40:86:83:be:b6:46:f6:1b:2c:56:a7:19Serial Number (int): 392716580030871542449431111444751317378841
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 57:37:eb:18:38:bc:30:5e:d7:8a:79:d4:a2:35:6e:44:80:d2:67:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a6:16:f0:57:ba:6c:e9:4a:7b:d4:7b:66:eb:de:7a:37:71:48:11:f3
Fingerprint (sha256): 67:3e:03:20:03:09:cb:02:d9:3c:4e:8c:94:65:c4:42:f5:85:fa:59:db:c1:9b:fb:b4:eb:30:82:ba:a7:47:be
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ref-aarau.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ref-aarau.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
refaarau.bwise.ch
www.ref-aarau.ch
www.ref-aarau.ch
Other certificates including the domain name ref-aarau.ch
(limited to 100 certificates)
stadtkirche.ref-aarau.ch
stadtkirche.ref-aarau.ch
kantorei.ref-aarau.ch
stadtkirche.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
kantorei.ref-aarau.ch
kantorei.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
owa.ref-aarau.ch
kantorei.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
owa.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
stadtkirche.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
stadtkirche.ref-aarau.ch
kantorei.ref-aarau.ch
stadtkirche.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
kantorei.ref-aarau.ch
kantorei.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
owa.ref-aarau.ch
kantorei.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
owa.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
stadtkirche.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
www.ref-aarau.ch
www.ref-aarau.ch
kantorei.ref-aarau.ch
Certificate
The complete raw certificate details for www.ref-aarau.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgISBIIXHh0nQIaDvrZG9hssVqcZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MjkxNjEwMzdaFw0x ODA4MjcxNjEwMzdaMBsxGTAXBgNVBAMTEHd3dy5yZWYtYWFyYXUuY2gwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHHjXUtGyHx5NAdUbFFfnerX0i4bB YhgHjJ3q5YcUMzPqRYCi6Hux1e5VTPiV/tsFbOPXrSAI77w3VkrZAlNEimJwTLrH ehYSsuGnmGF7bdEIkKaOzW0YdEpPR7QzECYVPcS+eXjX3Zpb8Gpm4hd1vq1bn7j5 +lLOA3Z7yANF8NlI8haylDRnVGxR0VHNptl+yLgaf7QYBlnv6xtf31w7VZKEi4ws r4DFs+iQ47DnJwa/BtSKPYNwny2Yl/GPTF4wMpiW+/nUGp922dPSp9zKYRSPt275 ZEQp+qWt0zN/Zbp0IDnesN4QklAWaATiB4JgINuKHhxZrJqYONHTHE2pAgMBAAGj ggMrMIIDJzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFc36xg4vDBe14p51KI1bkSA 0mc+MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wLgYDVR0RBCcwJYIRcmVmYWFyYXUuYndpc2UuY2iCEHd3dy5yZWYtYWFy YXUuY2gwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHW MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYB BQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1 cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdp dGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNl bmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3 AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABY6zhUMMAAAQDAEgw RgIhAPltpK3WHezjdhFYy1SQaqL3IOdb/NG5uWaZHQiJWJZxAiEAkbEefP5CS49D Ur1kxd+iX8MLbJYH1ZJ6KMgv1WFc9hwAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWOs4VCtAAAEAwBGMEQCICLtcWfTiiRRa7NVgLuIsltNLnXk N+tPPl+vBjNmMduTAiAHyBIRC3skK0i2x2+r6TpFheKUFKszhYTlp+GXENgOejAN BgkqhkiG9w0BAQsFAAOCAQEACmZ4cu9jxJri6RHYqfoQBmVBSnuMzOke/cYTnRcX lmgeTTkMCo7Q5CT4Svi5NZubZiIcHQIfTJ3ViolQJgjiVF8OJ8Qzt+bhc9fiBYFY vHbSapztFCjVXB9SnTSrPASIWLBX06oksgTdOlaKS/7tO4AibIi19QFEU//X+k8j 4mXqusatZRFhKN9hJhZox8nH7eaZSpHGfbRkruKWkCMvZFGUFS0gBxYc+zaLFTjs aVREmdkLGEqol3b/pm+XD67eSek6UK0VD5BHrfH5hVCxiszz9klzZhO0unGlkO2w Kl2mpKhdkrQI0E5jJ7Gge5joJS7LCjGjplA5F7ApcO9CDw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBx411LRsh8eTQHVGxRX 53q19IuGwWIYB4yd6uWHFDMz6kWAouh7sdXuVUz4lf7bBWzj160gCO+8N1ZK2QJT RIpicEy6x3oWErLhp5hhe23RCJCmjs1tGHRKT0e0MxAmFT3Evnl4192aW/BqZuIX db6tW5+4+fpSzgN2e8gDRfDZSPIWspQ0Z1RsUdFRzabZfsi4Gn+0GAZZ7+sbX99c O1WShIuMLK+AxbPokOOw5ycGvwbUij2DcJ8tmJfxj0xeMDKYlvv51BqfdtnT0qfc ymEUj7du+WREKfqlrdMzf2W6dCA53rDeEJJQFmgE4geCYCDbih4cWayamDjR0xxN qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 392716580030871542449431111444751317378841 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-29 16:10:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-27 16:10:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ref-aarau.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25766654297099608311377560476942602627398473908702008119585093668681731771645724253087110628257174135844643518935222580408492302029307069482514380351663041184696999044922173318977260474169131087898918614543624070541291101587839333364723930100357796966150020231231480112142615858591333173995204672945350578580998847271129397335593558197251505540556182009752880400393351634550210961965032496861332938649503332063787847261703344335225490538311418144397731379507895707866304464282130263139935387023344751569077710555729770551813327008896594453891906110119676336922488905232145831221521741568262188836200411447921397747113 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5737eb1838bc305ed78a79d4a2356e4480d2673e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refaarau.bwise.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ref-aarau.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000163ace150c30000040300483046022100f96da4add61dece3761158cb54906aa2f720e75bfcd1b9b966991d088958967102210091b11e7cfe424b8f4352bd64c5dfa25fc30b6c9607d5927a28c82fd5615cf61c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163ace150ad0000040300463044022022ed7167d38a24516bb35580bb88b25b4d2e75e437eb4f3e5faf06336631db93022007c812110b7b242b48b6c76fabe93a4585e29414ab338584e5a7e19710d80e7a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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