wildcard.dodlive.mil

Issued by DOD SW CA-53

About this certificate

This digital certificate with serial number 91:63 was issued on by U.S. Government.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificates issued after 1 March 2018, but prior to 1 September 2020, MUST NOT have a Validity Period greater than 825 days. (BRs: 6.3.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Certificate had 0 embedded SCTs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Certificate Subject

CN=wildcard.dodlive.mil,OU=USGOVT+OU=DOD+OU=PKI+OU=DMA,C=US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 91:63
Serial Number (int): 37219
Serial Number lenght: 16 bits, 2 octets

SubjectKeyId: e1:32:0d:3a:6f:a1:b0:47:33:a3:98:05:a0:73:48:6d:07:5a:41:6f
AuthorityKeyId: 51:c4:8b:33:99:94:c0:7e:bb:36:1d:e3:e2:3a:05:bd:32:74:9d:53

Fingerprint (sha1): a1:44:5a:9c:9f:d6:f6:a4:9f:0c:2e:74:db:a5:d1:b1:10:ef:61:55
Fingerprint (sha256): 74:13:e1:7e:83:9b:60:b7:60:e5:c9:87:41:0f:0c:d8:af:35:2a:7b:cf:95:29:7d:8e:35:21:04:2a:4f:3e:fd

Issuing Certificate URL: http://crl.disa.mil/sign/DODSWCA_53.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODSWCA_53.crl

Check the revocation status for certificate wildcard.dodlive.mil

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wildcard.dodlive.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wildcard.dodlive.mil
*.staging.dodlive.mil
*.staging.armylive.dodlive.mil
*.staging.navylive.dodlive.mil
*.staging.defense.dodlive.mil
*.staging.coastguard.dodlive.mil
*.dodlive.mil
*.armylive.dodlive.mil
*.navylive.dodlive.mil
*.defense.dodlive.mil
*.coastguard.dodlive.mil
navcms.dma.mil
*.armylive.cms.dodlive.mil
*.cms.dodlive.mil
*.coastguard.cms.dodlive.mil
*.defense.cms.dodlive.mil
*.navylive.cms.dodlive.mil

Other certificates including the domain name dodlive.mil

(limited to 100 certificates)
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
*.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
*.dodlive.mil
www.dodlive.mil
wildcard.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil
navylive.dodlive.mil
www.dodlive.mil
www.dodlive.mil
www.dodlive.mil

Certificate

The complete raw certificate details for wildcard.dodlive.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoAV2kcCERtojYMWz+g8
jxQoMys0Sruv1OzL9K+jd4oLOInXZwFmeyOI7Sq0bUe/OkeWl8YC9Gwp6w19p9Zm
6wCCVE1vKhOFr02/q49AlXD5jzrkH2xpgnmYTf/ZRC/7Fe6SW2qqFsWxZ0XfFgsx
1/XhwuO1QW6DAHizADIPk3/JGY3+++s4wCUHIWLmtV+ZV0qsez6NtMNKuGCYdcKf
4J6KqDOvTwlvjpMqDXAFu6zRki11TxBQcEfyhJ5Am+zlYJ5hR74ubEVjRW4Sm6+Z
GpL2fPl4hWcoR2++QJOfBWk19lLPl5OpBRU199vGZLW3l0ERxd6GGSva4DBtT84R
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DOD SW CA-53'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 16:31:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-14 16:31:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'USGOVT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DOD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DMA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wildcard.dodlive.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21018719870369721786972265894442737522823831507903145935282127015165264174050925717082217893125443824205083964407468219506191952957404110528259441478232970973702293417786347910119809163111292526832701049488843577717581961378261006626389777415198826716437920382574109591153068928129073947846358179252310071340660322480357869427812990795894894688448805762767594617030487744321521945830020967340544214147121839291244531041542105792554146093665581495683938077420884819920646096978854055210508624685032895432834787634479394006704585085062233770515632980240788216015266426953302625384131944182325068221826209995619405009317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51c48b339994c07ebb361de3e23a05bd32749d53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1320d3a6fa1b04733a39805a073486d075a416f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODSWCA_53.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODSWCA_53.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildcard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.defense.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navylive.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defense.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastguard.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navcms.dma.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armylive.cms.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastguard.cms.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defense.cms.dodlive.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navylive.cms.dodlive.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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