digipoort.koenenenco.nl

- Maatschap Koenen en Co -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 59:30:36:c4:48:4b:5f:ac was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Maatschap Koenen en Co

Company registration number: 00000003141254170000
Organization: Maatschap Koenen en Co
State / Province: Limburg
Locality: Maastricht
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 59:30:36:c4:48:4b:5f:ac
Serial Number (int): 6426696884912086956
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 73:22:92:cf:d7:a5:a8:19:9c:bc:31:58:58:35:b4:5b:2b:68:59:92
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): 8e:09:72:25:4c:34:42:6a:de:cf:a0:c8:d7:c3:29:b6:4e:a0:ef:d0
Fingerprint (sha256): 8e:00:2c:63:67:64:bd:b9:a7:ac:a3:29:62:dc:3d:a0:94:d8:7d:9b:ef:c6:a1:86:4b:ce:9f:97:3a:8c:a8:19

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate digipoort.koenenenco.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digipoort.koenenenco.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digipoort.koenenenco.nl

Other certificates including the domain name koenenenco.nl

(limited to 100 certificates)
link.vpngate-connector.com
pricetrends.io
pinkweb.koenenenco.nl
www.secretfriend.fr
kreationfilms.co.in
dev.botin.io
inbox.rest
www.koenenenco.nl
customers.approv.tech
utahtravelpass.com
www.buscontrol.app
my.dev.hudya.no
cartron.b2b4-check.com
test-manheim-dala.cox2m.com
www.koenenenco.nl
portaal.koenenenco.nl
platform-pcm.koenenenco.nl
koenenenco.nl
app.runmyservice.com
dl.webuters.com
mimoinfinito.store
fadyphilips.com
koenenenco.nl
blockprints.net
landing.koenenenco.nl
registration.egraft.org
mindpack.com
imagine.agency
pqs-juridisch.koenenenco.nl
www.sagarwatamkar.com
dev-sps.habrtech.cz
betterbriefs.dev
verify.blueshell.io
eltrasterobar.salvadormares.com
lumin-ideacloud.forgedx.com
www.danielschreitter.de
a061.foodle.su
q1-track.dpd.co.uk
loonheffingencheck.koenenenco.nl
www.koenenenco.nl
www.architex-solutions.net
docs.zax-92.com
cafe.owl2go.de
www.koenenenco.nl
www.dentocurean.com
app.yenisirketkur.com
ac.koenenenco.nl
www.housle.house
wabisabiuploader.com
da.koenenenco.nl
coopertransrotas.ideiadtc.com
evaluate.watani.gov.sa
www.koenenenco.nl
www.koenenenco.nl
app.moxit.com
dev.proxy.valuehr.sokuyaku.jp
app.darum.com.ng
actest.koenenenco.nl
trimurticonventschool.com
www.firebirdmun.com
kadurawebservices.fr
ac.koenenenco.nl
pqs-sturen-op-resultaat.koenenenco.nl
nps.koenenenco.nl
portaal.koenenenco.nl
colegios.mision.education
nsg.koenenenco.nl
marmitanaestrada.com
1956.ai
andyhavlik.it
designfactory.pt
mijn.koenenenco.nl
oolab.co.jp
tirunelveli.yazhdroptaxi.com
actest.koenenenco.nl
incidentally-login.emerging-response.com
gollmann.apoly.de
architext.masonzee.com
portal.koenenenco.nl
www.setagaya-phil.net
volgait.com
rms.motchasoft.com
www.aracolor.cz
pokeremulator.com
www.onsitecarservices.com
login.koenenenco.nl
www.gisua.com
mijn.koenenenco.nl
elshemy.site
www.octanejeans.com.ar
nsg.koenenenco.nl
www.fulsa.org.ar
static.loko.city
loonheffingscan.koenenenco.nl
recover.shopflo.co
page.ouch.ai
tallerdtres.com.ar
www.theaisites.co.in
portal.koenenenco.nl
worldofhensnft.com

Certificate

The complete raw certificate details for digipoort.koenenenco.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeTN3LwbJoYrI/UGyWfy
gdZ0z4qdYZYnvmFlaphvsfZdB+PB9F1t8NdpAml/gw4wwjSYNdPC9JgRUx/K81gj
bSbdlnxEdMsauxZevUZaO5uqXMt/No7cOXunw9OCK4UygCT5pJ24E+HI0mdqUkJ4
OokO50KNvRp/uiGIoJuN7sx1r97BrA6cNc0WpzIP2IfwNznicywnjaOkUBQg39th
OGdYT2JSw9mBeKqf6DIyUvtgyDKl3y2FOn6az3taA2BNUeISxY7AJ73//YoW2iER
Eyc1CVMuJH/7BsI0LNWiaWagmHR71QYItS/POU5YhDTSSS3lszctzr3jJMVsWeFc
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6426696884912086956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-03 09:50:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-02 09:50:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Limburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Maastricht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Maatschap Koenen en Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003141254170000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'digipoort.koenenenco.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16397568871828202624772315392257236412876658484571104330520967369870004063133021525662299326791149425041291210966550797113925159616112304275348378375247490756186555394156342363432201393751215179318751743647705679202042714684313685303926364719994355192324028739099564884585756433407617873061142197365328081286141365807153202908673775745173154656181163119618589080854430084631285856435979710524548059695740104832351938771779446581517584675588767092056933741243335679369328785286651765718276830383799451531615058895481597824967422705094183693778380470657379426945152355208351692864217247601685863931123973120917279693939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							732292cfd7a5a8199cbc31585835b45b2b685992
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digipoort.koenenenco.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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