www.westbahn.at

- Westbahn Management GmbH -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 01:ff:5a:03:83:07:8c:50:1c:fa:28:84:1d:68:64:00 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Westbahn Management GmbH

Company registration number: 319409w
Organization: Westbahn Management GmbH
State / Province: Wien
Locality: Wien
Country: AT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:ff:5a:03:83:07:8c:50:1c:fa:28:84:1d:68:64:00
Serial Number (int): 2655089389811774487778911636876190720
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c7:f5:97:02:49:42:4b:fa:a8:64:0b:4b:2d:3a:25:62:66:ef:8e:2d
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 50:c2:0e:cf:37:92:e5:b2:3c:92:d4:d4:f1:aa:c5:70:81:d3:4a:e2
Fingerprint (sha256): b2:3f:8c:3a:72:7c:ed:dc:ed:e8:29:27:56:91:20:ac:6f:12:85:31:f0:39:1e:b5:08:1c:58:47:81:e4:f1:ea

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate www.westbahn.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.westbahn.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.westbahn.at
westbahn.at

Other certificates including the domain name westbahn.at

(limited to 100 certificates)
westbahn.at
*.westbahn.at
westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
www.westbahn.at
*.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
*.westbahn.at
test.pay.westbahn.at
ticketingfeedback.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at

Certificate

The complete raw certificate details for www.westbahn.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2655089389811774487778911636876190720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '319409w'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Westbahn Management GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.westbahn.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843197536921001118085257018467331082942484512122721239145894068851147737500649353369091634877350737207749687786185166580515129586420514234034690401156539838400314751041336107342232111342328002798711859809266074363837467071472309570073857603749347051191913469267119186807265084000725311833407794388978973052507893541912978289739475731532911894916464706138280439634385668046388006655386590042376017077487414872530316103132219438622374311381600020580550627819931811666660235438767541104045199852464422713241358886530248291181230729288474232531811392957602862277047077042492173284215649534913714655627715227789926760908140312067828136975555912560647218386429190979757411067224856581269303497079488150985882505741214308188079309016767816751044882660263543090701397656861435777575355701871254458575593301236331582181666062863888507237822468020498515493712107244763548943250756384885442848803384313218081001760137992694806685826317683729947753056566983022028091911456031423612378774011373231366670976195529346215450969510057216675124253017419572923382259044802867341674218392151342690911183675481598286214200627920321253429035779696114618002378134706435624553376538504318963320989004190444879233307131216045839132755470987719516871193078891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7f5970249424bfaa8640b4b2d3a256266ef8e2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westbahn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westbahn.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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