email1.bield.co.uk

- Bield Housing & Care -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:4c:05:9e:98:8d:a1:71:57:58:1c:64:2d:8b:7d:76 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bield Housing & Care

Organization: Bield Housing & Care
Organization unit: ICT Dept
Locality: Edinburgh
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:4c:05:9e:98:8d:a1:71:57:58:1c:64:2d:8b:7d:76
Serial Number (int): 3053184530129116582883138555477720438
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 41:89:a7:da:71:a1:d6:40:47:8f:2f:b0:83:d5:a3:96:99:f5:dd:43
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 73:50:8f:07:61:0f:0b:41:0e:45:78:84:7e:53:6b:38:c0:c1:08:86
Fingerprint (sha256): 8a:4e:fb:af:e1:b5:fc:70:20:f0:8c:43:97:07:8a:24:c2:f0:d2:06:4b:10:d3:6e:4e:f3:94:c2:e2:1a:15:47

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate email1.bield.co.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for email1.bield.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

email1.bield.co.uk
gxch.bield.co.uk
autodiscover.bield.co.uk
exch.bield.co.uk
www.email1.bield.co.uk
bield.co.uk

Other certificates including the domain name bield.co.uk

(limited to 100 certificates)
sdp.hja.net
edi-gateway.bield.co.uk
servicedesk.monaghancoco.ie
bield-gateway.bield.co.uk
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
itsupport.bandmwaste.com
foundation.bield.co.uk
helpdesk.alivetravel.com
gla-gateway.bield.co.uk
itassist.harrowschool.org.uk
helpdesk.commit.fi
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
servicedesk.monaghancoco.ie
help.thereader.org.uk
servicedesk.monaghancoco.ie
pomoc.lekam.pl
foundation.bield.co.uk
servicedesk.endrich.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
servicedesk.monaghancoco.ie
email1.bield.co.uk
servicedesk.monaghancoco.ie
secure.bield.co.uk
bield.co.uk
ictservicedesk.bield.co.uk
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
gla-gateway.bield.co.uk
service-desk.bedfordgirlsschool.co.uk
servicedesk.ambient.org.uk
servicedesk.durbinglobal.com
servicedesk.grupaeurocash.pl
helpdesk.greenfood.nl
newservicedesk.mi-hub.co.uk
servicedesk.labbuit.it
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
help.thereader.org.uk
jobs.bield.co.uk
servicedesk.monaghancoco.ie
helpdesk.cartrawler.com
sd.kormotech.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdesk.frostkrone.de
jobs.bield.co.uk
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
ithelpdesk.ocugroup.com
gla-gateway.bield.co.uk
help.sch1584.ru
bield.co.uk
itassist.harrowschool.org.uk
itservice.roxcel.com
servicedesk.endrich.com
gla-gateway.bield.co.uk
servicedesk.ambient.org.uk
helpdesk.cysec.gov.cy
servicedesk.lumanity.com
itsupport.actibel.be
servicedesk.mi-hub.co.uk
helpdesk.greenfood.nl
secure.bield.co.uk
email1.bield.co.uk
jobs.bield.co.uk
secure.bield.co.uk
servicedesk.durbinglobal.com
servicedesk.monaghancoco.ie
itdesk.solargis.com
bield.co.uk
helpdesk.thermegroup.com
servicedesk.maccresi.com
helpdesk.vandenbraembussche.be
helpdesk.nauit.lt
support.sysco.uk.com
helpdesk.trinity.croydon.sch.uk
helpdesk.adc.ro
servicedesk.mi-hub.co.uk
help.idowa.de
servicedesk.cplaromas.com
email1.bield.co.uk
servicedesk.mi-hub.co.uk
servicedesk.cplaromas.com
servicedesk.monaghancoco.ie
bield.co.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.maccresi.com
helpdesk.trinity.croydon.sch.uk
helpdesk.aldaholding.com
servicedesk.lumanity.com

Certificate

The complete raw certificate details for email1.bield.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4sPk++XiI3UCFL8Ok6L
AFZn1+DYo/9amWqbXLsDUq40gUv+eW20/apzd4W/vsY//yJRdg8gapMRjGxhwXZR
kKaPr6MKiGGTnGdU+sPnF054ooUSfnu+3UHPk8TRQaoKLzmMoosYpiORDxx0qCHQ
QpNsKtT26jwc5WihNpM01Kjt+Yv8yZWJ5DnYYAVhgPYTEEBF0LwZ8o5TROL2ky05
yTUXVAS/bhvTNo6oLaKVq5RHLCkTAiTFcHAYQg/D8sbVmCStX6vca3TxwMVZhEId
QLTeX0Th/nycbIToyVQ/fQWgJOVCfTeSxm6mIaKDgkHYio/tomrknHbY73TEAHZ8
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3053184530129116582883138555477720438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bield Housing & Care'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT Dept'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'email1.bield.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26199902589406032292776350815953342711127038961481224745732647991367439219429708968709780976095750298415839689260636220065141349761811719788878497252745858596082071258951253517064743623115443140527822858076898531494970550872777298371230400469857739959448738642808268947665091307455072626817878394799960284681217862541298363067318331679920773068528324937346655642691404905285779946736092410404988880059363488899261524880669740874361311911354515120023387712820097585802038297316372344181995941435161993565821772381793883508025680410762418691761496938461680505872363353951095788776084376708197617445824660184356533730531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4189a7da71a1d640478f2fb083d5a39699f5dd43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email1.bield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gxch.bield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exch.bield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.email1.bield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bield.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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