cpcalendars.bacs-generator.kissdigital.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:9b:ce:69:4e:3d:17:0d:9e:be:2a:86:03:86:63:c3:17:3a was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cpcalendars.bacs-generator.kissdigital.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9b:ce:69:4e:3d:17:0d:9e:be:2a:86:03:86:63:c3:17:3a
Serial Number (int): 401467278344956288869141655514319727826746
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 50:d7:1a:55:9f:c4:85:df:12:9c:d2:c0:c5:6c:53:64:bd:6d:b1:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:c2:b6:8d:b0:f1:d6:1a:de:61:fc:7d:7f:2f:ac:55:05:84:9e:27
Fingerprint (sha256): 88:4e:39:26:83:fb:72:67:1f:dd:bb:de:56:cf:c2:1c:aa:18:46:8f:61:3b:5a:c2:de:88:86:5e:0d:b7:5f:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcalendars.bacs-generator.kissdigital.co.uk

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcalendars.bacs-generator.kissdigital.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bacs-generator.kissdigital.co.uk
cpanel.bacs-generator.kissdigital.co.uk
cpcalendars.bacs-generator.kissdigital.co.uk
cpcontacts.bacs-generator.kissdigital.co.uk
kiscom.co.uk
kisscom.co.uk
kisscreativegroup.co.uk
kisscreativegroup.com
kissengage.co.uk
live-kisscom.kissdigital.co.uk
mail.bacs-generator.kissdigital.co.uk
mail.live-kisscom.kissdigital.co.uk
webdisk.bacs-generator.kissdigital.co.uk
webmail.bacs-generator.kissdigital.co.uk
wework.kisscom.co.uk
whm.bacs-generator.kissdigital.co.uk
www.bacs-generator.kissdigital.co.uk
www.kiscom.co.uk
www.kisscom.co.uk
www.kisscreativegroup.co.uk
www.kisscreativegroup.com
www.live-kisscom.kissdigital.co.uk
www.wework.kisscom.co.uk

Other certificates including the domain name kissdigital.co.uk

(limited to 100 certificates)
flywheelmarketing.co.uk
durbinsolarlights.com
leaf-live.kissdigital.co.uk
nityr.us
neophore.com
live-phoremost.kissdigital.co.uk
live-ithaka.kissdigital.co.uk
cambridgecandi.org.uk
alimentaryhealth.ie
brand.rsc.org
ubiquigent.biz
live-eahsn.kissdigital.co.uk
leafexpressionsystems.net
kisshub.co.uk
tonejet.kissdigital.co.uk
mail.adayinthewoods.org.uk
www.live-cambridgefuturetraumacare.kissdigital.co.uk
cambridgecandi.org.uk
1spatial.kissdigital.co.uk
sbrihealthcare.co.uk
live-neophore.kissdigital.co.uk
mail.midatechlive.kissdigital.co.uk
mail.midatechlive.kissdigital.co.uk
phoremost.com
www.evonetix.uk
brand.rsc.org
live-flywheelmarketing.kissdigital.co.uk
live-eahsn.kissdigital.co.uk
khandel-light.co.uk
ithaka.co.uk
cambridgefuturetraumacare.net
kisshub.co.uk
nityr.us
pioneer-foods-uk.com
tonejet.kissdigital.co.uk
pioneer-foods-uk.com
kisshub.co.uk
biocair.com
live-cambridgecandi.kissdigital.co.uk
eahsn.org
live-sbrihealthcare.kissdigital.co.uk
mail.midatech.kissdigital.co.uk
kisscreativegroup.co.uk
1spatial.kissdigital.co.uk
www.midatech.midatechpharma.com
ithaka.co.uk
brm-works.co.uk
evonetix.net
www.biocair.it
kisshosts.co.uk
cpanel.brm-works.com
webmail.midatechlive.kissdigital.co.uk
phoremost.com
www.sbrihealthcare.co.uk
biolinerx.com
flywheelmarketing.co.uk
www.leaf-live.kissdigital.co.uk
1spatial.kissdigital.co.uk
nityr.us
brand.rsc.org
cpanel.midatech.kissdigital.co.uk
www.bokomo.co.uk
webdisk.kisshub.co.uk
kisshub.co.uk
www.tonejet-live.kissdigital.co.uk
www.midatech.midatechpharma.com
adayinthewoods.org.uk
bison-rivers.com
biocair.com
neophore.com
cpanel.neophore.kissdigital.co.uk
webdisk.khandel-light.co.uk
cpcalendars.phoremost.kissdigital.co.uk
cpanel.midatech.kissdigital.co.uk
mail.live-neophore.kissdigital.co.uk
kisscom.co.uk
cpcalendars.phoremost.kissdigital.co.uk
evonetics.co.uk
midatechpharma.com
cpcalendars.iblon.kissdigital.co.uk
phoremost.com
reactabiotech.co.uk
leaf-live.kissdigital.co.uk
sbrihealthcare.co.uk
flywheelmarketing.co.uk
zymecommunications.com
webmail.neophore.kissdigital.co.uk
mail.biolinerx.kissdigital.co.uk
www.midatech.midatechpharma.com
kisscom.co.uk
marshallfleetsolutions.co.uk
tonejet.kissdigital.co.uk
flywheelmarketing.co.uk
nityr.us
whm.prototype.kissdigital.co.uk
tools.eahsn.org
mail.midatech.kissdigital.co.uk
live-alimentaryhealth.kissdigital.co.uk
phoremost.com
biocair.com

Certificate

The complete raw certificate details for cpcalendars.bacs-generator.kissdigital.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB/HirJ0u8FO1aIRYpVq
YJKZh6taavDxqZpJXQTZY/s2w4e8m9syjPmWdKLkknrYgCHWMaqEpjajipHa00hx
Kv2NYGOT3m0mYK1CmT2Ag5LpFab6D2a58dzv+3aPlWnorEuxNjNb5N2TUJZCtVjB
koq2Y5B7BxOTyNVYP2vEwJtBG+FmBxftijY0XE1BiPT10DwlBQSb7FvcX00HK7zS
ujEVQrjgddEomx9N1jLOQstTFh2swjjMwA7bni72BKxqbXkOTDknWmeKcGLnHdCh
ffP4SAFRI9zJGD09kEg92M/4ZuP8E2zsLDHBb9cXralYB1lJjGZeaQRKK6OGr72D
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401467278344956288869141655514319727826746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 01:41:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 01:41:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcalendars.bacs-generator.kissdigital.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21728659490004747795890243687247797851610891765654957849408016293446872794439365816451906148187170127528008202341192886878071270106548132071652403046177649060020362916469116649653016948001880785311213126013314483097364273328705403669410122505938816705537020476384847084011359843108362930551871439591651710549700615650095287339763885773597384903523359467807317974126492324187295442529160595136090866472549829019133869771199284144797449397964130760672755328193975220555485499737705102914158416199120265439172892356976826187604786638332210856487253328572525427138470438194645633250492338782878323413566539575303077724937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50d71a559fc485df129cd2c0c56c5364bd6db12d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (710 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacs-generator.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bacs-generator.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.bacs-generator.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.bacs-generator.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiscom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kisscom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kisscreativegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kisscreativegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissengage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-kisscom.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bacs-generator.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.live-kisscom.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bacs-generator.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bacs-generator.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wework.kisscom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.bacs-generator.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacs-generator.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiscom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kisscom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kisscreativegroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kisscreativegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-kisscom.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wework.kisscom.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c3d00251c000004030047304502206b1eefb8b1e4d4474f4e238049c93346a96317b964d731b13d9df11e2dec2456022100e5a4999f9424795f9c909702a4e64fd9bfe252bb6389d746b4fc7f9d70566fda00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c3d00254400000403004830460221008742bce24a89aa4304d46f636716945a6b6cf0cca6a8e7d11e8d1ea1000824c9022100fdc68d206aa15982e254b79441a1c645b3f76d9308a9a6bc1e46d61061ecf79e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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