mail.lcnb.com

- LCNB Corp -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number b8:ba:64:a7:2f:99:76:1f:f6:0d:28:fc:51:24:11:3c was issued on by The USERTRUST Network.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 1 DNS name(s) are bare public suffixes: lcnbexch2 The domain SHOULD NOT have a bare public suffix (awslabs certlint)

LCNB Corp

Organization: LCNB Corp
Organization unit: Hosted by GO Concepts Inc
Organization unit: Unified Communications
Address: 2 North Broadway
Postal code: 45036
State / Province: Ohio
Locality: Lebanon
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b8:ba:64:a7:2f:99:76:1f:f6:0d:28:fc:51:24:11:3c
Serial Number (int): 245545759926906822543222118024898416956
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 95:19:d5:43:ea:29:c3:38:d6:5d:a1:1b:98:5e:06:f8:32:3e:64:c2
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 04:0f:3d:95:b4:ae:ed:27:a8:b7:d1:48:81:38:d0:ce:52:f8:eb:96
Fingerprint (sha256): 89:28:15:51:be:43:00:43:67:f7:a1:b0:99:53:4a:34:30:d5:0e:b5:38:23:86:b9:25:87:ec:6b:9b:66:58:44

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate mail.lcnb.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.lcnb.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.lcnb.com
autodiscover.lcnb.com
lcnbexch2
lcnbexch2.lcnbdomain.local

Other certificates including the domain name lcnb.com

(limited to 100 certificates)
support.psplegal.ca
assist.fusiongroupusa.com
support.psplegal.ca
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
www.lcnb.com
www.lcnb.com
assist.nmrevents.com
start.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
go.lcnb.com
assist.fusiongroupusa.com
mail.lcnb.com
www.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
smc.lcnb.com
www.lcnb.com
www.lcnb.com
assist.smsi.group
assist.fusiongroupusa.com
assist.fusiongroupusa.com
mail.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
assist.fusiongroupusa.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.edgt.com
assist.smsi.group
mail.lcnb.com
www.lcnb.com
mail.lcnb.com
assist.aa-techs.com
help.rubieraproductions.com
assist.smsi.group
smc.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
mail.lcnb.com
*.lcnb.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
support.psplegal.ca
assist.fusiongroupusa.com
assist.fusiongroupusa.com
help.rubieraproductions.com
start.lcnb.com
assist.thebergroup.com
support.psplegal.ca
help.rubieraproductions.com
assist.thebergroup.com
servicedesk.oq8.om
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.aa-techs.com
help.rubieraproductions.com
assist.lcnb.com
assist.aa-techs.com
assist.aa-techs.com
assist.smsi.group
assist.nmrevents.com
www.lcnb.com
assist.fusiongroupusa.com
assist.nmrevents.com
assist.ctp123.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
go.lcnb.com
assist.edgt.com
www.lcnb.com
assist.nmrevents.com

Certificate

The complete raw certificate details for mail.lcnb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 245545759926906822543222118024898416956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45036'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lebanon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2 North Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LCNB Corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by GO Concepts Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.lcnb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681304603288961271357547965819151223709573219163290991456130551310952543789440081933501749451931090097860128163020735380025317150087562362468758590057274835857446432187110285709038015365644736428508494823214773639954817099450285009281605927729247910992597575821748054987032251516635570916269064710275949865798335426614368626569954702905674301377880065153350355620288654745597915250440338129666384834131190821769784858224792067424176560080583267547538455692409587241055056553445370799029647914822092643575105829255926110179340677949752889923447122006111954009591177511196694616201934614201691439650267676018419070461604465441808173721334768461342212290233061477870367068911303751812554740444474278075572702868145714046952259262377308981271601278758296247755781826868576918705868281301972820659424898062649592591225909757854867223277559719878424422608343683244687390647628327513540733880475164629112010286925656149377511153638548584907336721809857462755877235870153589442418056543316578084934480383543604155826358263072497304744088381939579490778811312852718205257770886389463886013911111643781611247182273089315988588955202572155089469101421195818018428654884600538662244553589653215697002784841390660623884315825159647771766539995311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9519d543ea29c338d65da11b985e06f8323e64c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lcnb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lcnb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcnbexch2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcnbexch2.lcnbdomain.local'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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