sap-support.redwood.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 07:ae:9d:44:fe:a2:54:47:f2:50:e8:4b:11:18:32:2c was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sap-support.redwood.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:ae:9d:44:fe:a2:54:47:f2:50:e8:4b:11:18:32:2c
Serial Number (int): 10211245428507731883285790693082542636
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 13:84:a4:06:ca:9e:e0:7b:28:ef:38:8f:bc:60:98:d1:d6:70:6d:cf
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 8b:cf:fe:2c:48:1b:ec:c8:7b:88:8f:68:18:a1:4b:0b:c9:a9:7e:84
Fingerprint (sha256): 69:02:0d:5d:e5:9d:94:a1:c8:cc:a5:74:49:b7:6b:01:b1:10:3e:26:e2:3d:69:90:26:95:c9:8f:75:0c:0e:7b

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate sap-support.redwood.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sap-support.redwood.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sap-support.redwood.com

Other certificates including the domain name redwood.com

(limited to 100 certificates)
www.redwood.com
webmail.redwood.com
files.redwood.com
uptime.redwood.com
docker-registry.usw2.cs.redwood.com
euw1.intelligence.redwood.com
euw1.intelligence.redwood.com
go.redwood.com
support.us.redwood.com
support.us.redwood.com
clientvpn.redwood.com
uptime.redwood.com
status.vleo.net
uptime.redwood.com
runmyjobs.redwood.com
unms-test.redwood.com
*.redwood.com
redwood.com
support.eu.redwood.com
status.eurabo.be
docs.cs.redwood.com
*.redwood.com
cdn.redwood.com
get.redwood.com
unms-test.redwood.com
*.redwood.com
rwx.redwood.com
uptime.redwood.com
go.redwood.com
documentation.redwood.com
clientvpn.redwood.com
uptime.redwood.com
dev.marketing.redwood.com
uptime.redwood.com
rmj.redwood.com
docker-registry.euc1.cs.redwood.com
cgit.it.redwood.com
static.marketing.redwood.com
hello.redwood.com
uptime.redwood.com
go.redwood.com
r2w.redwood.com
wallis.status.app.vista.co
docker-registry.use2.cs.redwood.com
get.redwood.com
docker-registry.euw1.redwood.com
euw1.intelligence.redwood.com
cdn.redwood.com
status.tbft.org.uk
www2.redwood.com
uptime.redwood.com
www.redwood.com
status.cs.redwood.com
docker-registry.euw3.cs-test.redwood.com
support.eu.redwood.com
www2.redwood.com
seftp.redwood.com
staging.marketing.redwood.com
uptime.redwood.com
euw1.intelligence.redwood.com
*.redwood.com
docker-registry.euw1.cs-test.redwood.com
hello.redwood.com
*.euw1.cs.redwood.com
redwood.com
www.redwood.com
go.redwood.com
sap-support.redwood.com
status.eurabo.be
hello.redwood.com
get.redwood.com
euw1.intelligence.redwood.com
euw1.intelligence.redwood.com
status.hotel-spider.com
docker-registry.euc2.cs.redwood.com
status.cs.redwood.com
*.redwood.com
intelligence.redwood.com
wp.marketing.redwood.com
uptime.redwood.com
oauth.cs.redwood.com
webmail.redwood.com
*.euw1.redwood.com
clientvpn.redwood.com
support.us.redwood.com
euw1.intelligence.redwood.com
uptime.redwood.com
support.eu.redwood.com
status.absis-ciborg.com
support.us.redwood.com
status.cs.redwood.com
uptime.redwood.com
unms-test.redwood.com
support.eu.redwood.com
cdn.redwood.com
support.us.redwood.com
enroll.redwood.com
uptime.redwood.com
armory.redwood.com
university.redwood.com

Certificate

The complete raw certificate details for sap-support.redwood.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIQB66dRP6iVEfyUOhLERgyLDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDEzMDAwMDAwMFoXDTI1MDIyNzIzNTk1OVowIjEg
MB4GA1UEAxMXc2FwLXN1cHBvcnQucmVkd29vZC5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCe3DbDlMOSHccIUAkNWc/91any7Dmhfz3GHDH4ZJUY
sI3EZJOWL++nbGfWOs/nyhylQfF4SpDJ/z2es6vTGM4uzshiyPLrdNq0Oqo7thMA
5HyLK+8bQ2xnY5Sxt7sbWrqvOGuB46Y+xOTyLza5m8qkifjnNYnSghpJtlcnOxRq
hnHIOSTwS8FVniTmk9GWWgrq7PnW9YyXuIiuWLtg2A7vtnDqDCcuw3nh7RdO5wwk
wmsT119Nco6qJQSuHEObiR4/xXmZctaDJdrSVeovH+7vJhj8blNsjdXgwjhr6xO6
o03bJ/JC3L17s4rJ7NZ33onnA/AaqLjwlOtlyPhVgWcfAgMBAAGjggLuMIIC6jAf
BgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUE4SkBsqe
4Hso7ziPvGCY0dZwbc8wIgYDVR0RBBswGYIXc2FwLXN1cHBvcnQucmVkd29vZC5j
b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v
Y3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEE
aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5j
b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29t
L3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFo
AWYAdQBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY1ZYfmRAAAE
AwBGMEQCICctqrfS9xLj5y0vF0g3nO0YemkQFVDdq2lvN4B7XfqWAiBz+eq8Z0xi
BgTNf9I8XqN0Yy7Vzj0FSv0TFZlvmHXXmgB1AH1ZHhLheCp7HGFnfF79+NCHXBSg
TpWeuQMv2Q6MLnm4AAABjVlh+ZUAAAQDAEYwRAIgOzIPz4rk/wUN6P1h8qDRn/YF
MDxbabOwPmWww4EUI18CIHg7th41LGlp1bmBogS5OrHVZtTWgAN5NRXBWw2aVH36
AHYA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGNWWH5uQAABAMA
RzBFAiA2lZC2XKDyBmGBNpuRbx5ME8EQa4RC7UUlYD5IFaK18AIhAJtI55FWUIB+
6sVtdGYPlHI907fCH/+rJlNO8vkTrbLEMA0GCSqGSIb3DQEBCwUAA4IBAQAgZL/G
CBaYBIF195JOsdquO2i9DLWS6nRsEELm75+AWzDHACifJd37Zl6FizBgbSmxzxUS
tkU4d+VZ8qisXzsWXdGIqYxPZdmWuPu9z50q8Y9LmmxykpLqush5NTYkzP4SyBUb
9lw6kBr5xS1YYqc+8VDQRI2DTzg8zmDzOP15Fgy07Sh9f072XJx0fgkttREpihpD
mDjGowwGp2+fbBBrIQHTVFLXHg3OCfSxDobYpxgpJLGkCMFy9n022G8pdAe/NQdP
plq+Vxiq/PTZEBjsFIU1TWSrZTXg81OqxwSht3ufVsdfZtWXo4xfO7d1l4doeFGi
FZl2zVZ/N03itARx
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntw2w5TDkh3HCFAJDVnP
/dWp8uw5oX89xhwx+GSVGLCNxGSTli/vp2xn1jrP58ocpUHxeEqQyf89nrOr0xjO
Ls7IYsjy63TatDqqO7YTAOR8iyvvG0NsZ2OUsbe7G1q6rzhrgeOmPsTk8i82uZvK
pIn45zWJ0oIaSbZXJzsUaoZxyDkk8EvBVZ4k5pPRlloK6uz51vWMl7iIrli7YNgO
77Zw6gwnLsN54e0XTucMJMJrE9dfTXKOqiUErhxDm4keP8V5mXLWgyXa0lXqLx/u
7yYY/G5TbI3V4MI4a+sTuqNN2yfyQty9e7OKyezWd96J5wPwGqi48JTrZcj4VYFn
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10211245428507731883285790693082542636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sap-support.redwood.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20054243716753901462630978463824860075636271560300548677856946647944352921469947069407176731413293785672830039938615750679576691827446424822407071368101537837767607308614349647732221265231726837362020465170100551785102381563857139756925056085275872633311352942883938246981162920423288191448526638845113848744555129255899522695799432995474543609845500119534280554789298706236448694353726933514391120463696512718261432554610271493907411496326249938577679499887749191590906734704246001016456482525026759386630766693343388241950683577883903821280619786530782662338631335087500159396591639776346722881990106788736383674143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1384a406ca9ee07b28ef388fbc6098d1d6706dcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap-support.redwood.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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