*.eightfold.ai

Issued by Amazon

About this certificate

This digital certificate with serial number 07:99:45:46:bc:dd:a8:f4:ad:e7:22:28:54:53:a7:e6 was issued on by Amazon.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.eightfold.ai

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:99:45:46:bc:dd:a8:f4:ad:e7:22:28:54:53:a7:e6
Serial Number (int): 10100422480535420024908103366934243302
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 62:27:6f:05:66:89:f8:98:0f:8b:c5:73:96:d9:e0:26:75:58:22:f4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b0:89:fe:33:19:d0:79:21:dc:c9:2c:63:55:ba:5b:f9:7b:74:4f:30
Fingerprint (sha256): 72:20:10:ef:ce:f2:b9:ed:55:0b:71:04:b2:0f:c9:97:78:f5:9a:49:47:99:70:3a:03:c6:66:56:a0:8d:8e:6c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.eightfold.ai

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eightfold.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eightfold.ai
jobs.conagra.com
directsourcepro-bpm.prounlimited.com
vchopra.eightfolddemo.com
directsourcepro-nov.prounlimited.com
*.talentexchange.ai
join.postmates.com
jobs.cerner.com
directsourcepro-rch.prounlimited.com
directsourcepro-umg.prounlimited.com
talentexchange.ai
careers.micron.com
directsourcepro-inv.prounlimited.com
career.zillowgroup.com
jobs.dolby.com
directsourcepro-spk.prounlimited.com
directsourcepro-cgn.prounlimited.com
directsourcepro-crg.prounlimited.com
careers.dexcom.com
directsourcepro-svn.prounlimited.com
elevate-stage.dcsg.com
elevate.dcsg.com
directsourcepro-bvt.prounlimited.com
join.matchgroupcareers.com
directsourcepro-wky.prounlimited.com
odgers.obusdynamics.com
jobs.roblox.com

Other certificates including the domain name eightfold.ai

(limited to 100 certificates)
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
www.eightfold.ai
*.eightfold.ai
*.eightfold.ai
pages.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
www.eightfold.ai
*.eightfold.ai
www.eightfold.ai
community.eightfold.ai
www.eightfold.ai
*.eightfold.ai
*.eightfold.ai
pages.eightfold.ai
community.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
www.eightfold.ai
www.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
apidocs.eightfold.ai
aijobcms.eightfold.ai
www.eightfold.ai
*.eightfold.ai
eightfold.ai
pages.eightfold.ai
*.eightfold.ai
apidocs.eightfold.ai
*.eightfold.ai
t.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
www.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
eightfold.ai
*.eightfold.ai
apidocs.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
eightfold.ai
*.eightfold.ai
*.eightfold.ai
*.eightfold.ai

Certificate

The complete raw certificate details for *.eightfold.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SpxjdpzSdxO4c5u6bRt
HyRAPKMWnHvK/QGJnkEIAby5UgLEnWVfzSzt8ZbUSO/kRkI7NnnIR00JbrYa3w6H
Qd/teIWVHSPlKDEi1HKd8t4dLn1z0XduG6DALpHyn4EDcofHrLxA8A9XFPZ0nVv0
5FXfuHnC4tL1KsLkDmqmIDoGcz6ySSLKXMtgXrmApTGTfZaoRkjQhDuA1iIACVXM
vOkgU1Rc/0h+stYZnzeHMHbLTu0tOd2j62vZ/UadAM9YnLTqg7YPMg85jAv2XqbT
BiA2cqnPSVlNXqZ+6y5fsWZcj2YyS5GLMsGWfy8peuBfdJ5kGoSqzH8J/PetCAgp
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10100422480535420024908103366934243302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eightfold.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28424548322165683741100596194872564591081351769366123364905249528613164922709003289968865685390997192792393866614906990457605238704939614356505351686657452672840983209145478096556491238252401355140581157264235636497358681345315970973554284464343713795189143266020250384222236009620557805189383811488550661958345505502174479609708864224829910376540903265880598959233986133128577075306041661536738329296118493236465627682807325707290508110854010679153423784655176089822058311791544769449625338925878809201621536793662923123387049276413890572156761835853957995936703027135105143732911597654780764091598722446471744465331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62276f056689f8980f8bc57396d9e026755822f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (752 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eightfold.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.conagra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-bpm.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vchopra.eightfolddemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-nov.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talentexchange.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.postmates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.cerner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-rch.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-umg.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentexchange.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.micron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-inv.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.zillowgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.dolby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-spk.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-cgn.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-crg.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.dexcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-svn.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevate-stage.dcsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevate.dcsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-bvt.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.matchgroupcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directsourcepro-wky.prounlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odgers.obusdynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.roblox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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