www.progress.com

- Progress Software Corporation -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:e8:ed:60:5f:4c:41:22:86:6e:a7:68:14:90:e7:af:8a was issued on by GlobalSign nv-sa.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Progress Software Corporation

Organization: Progress Software Corporation
State / Province: Massachusetts
Locality: Bedford
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:e8:ed:60:5f:4c:41:22:86:6e:a7:68:14:90:e7:af:8a
Serial Number (int): 1492447792372354332516939766079908750012298
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 99:ed:ad:7e:9a:d0:83:39:71:8e:7f:06:f3:af:ff:f4:73:bb:3b:2b
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 82:23:9a:94:f8:47:4f:5e:09:28:36:a4:c8:b2:ff:92:24:2d:6a:ca
Fingerprint (sha256): c9:7c:dd:81:84:ed:bc:2f:0c:99:73:10:f6:8c:2b:91:0f:91:8b:49:c8:9c:6a:67:4d:e8:32:a9:1b:05:c0:d6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www.progress.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.progress.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.progress.com
origin-www.progress.com
partners.progress.com
datadirect.com
datadirectcloud.com
progress-software.fr
progress.co.uk
progress.com.br
progress.de
progress.es
progress.nl
www.datadirect.com
www.datadirectcloud.com
www.progress-software.fr
www.progress.co.uk
www.progress.com.br
www.progress.de
www.progress.es
www.progress.nl
progress.com

Other certificates including the domain name progress.com

(limited to 100 certificates)
*.palette-test.progress.com
statuspage.io
leapfrog-ssl-24.gcs-web.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
vpnrd.progress.com
cert00066-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
statuspage.io
statuspage.io
nc-teamcity.americas.progress.com
statuspage.io
cloud-status.dimensiondata.com
statuspage.io
statuspage.io
statuspage.io
cert00066-azurecdn.akamaized.net
statuspage.io
statuspage.io
cert00066-azurecdn.akamaized.net
statuspage.io
cloud-status.dimensiondata.com
cloud-status.dimensiondata.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cds1.cvent.com
www.datadirect.com
cloud-status.dimensiondata.com
ucemea.progress.com
statuspage.io
cert00066-azurecdn.akamaized.net
leapfrog-ssl-24.gcs-web.com
statuspage.io
statuspage.io
statuspage.io
cloud-status.dimensiondata.com
statuspage.io
statuspage.io
cert00066-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
statuspage.io
leapfrog-ssl-24.gcs-web.com
statuspage.io
docs.progress.com
statuspage.io
statuspage.io
statuspage.io
*.progress.com
store.progress.com
wwwuat.progress.com
statuspage.io
leapfrog-ssl-24.gcs-web.com
cert00066-azurecdn.akamaized.net
kendo.git.progress.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
web-sandbox-prod.rlb-test.progress.com
cert00066-azurecdn.akamaized.net
cds1.cvent.com
statuspage.io
statuspage.io
cert00066-azurecdn.akamaized.net
caretendtrust.wellsky.com
statuspage.io
statuspage.io
statuspage.io
cert00066-azurecdn.akamaized.net
cert00066-azurecdn.akamaized.net
pscuc.progress.com
statuspage.io
statuspage.io
cert00066-azurecdn.akamaized.net
statuspage.io
statuspage.io
statuspage.io
leapfrog-ssl-24.gcs-web.com
statuspage.io
cert00066-azurecdn.akamaized.net
statuspage.io
statuspage.io
kendo.git.progress.com
metrics.progress.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cert00066-azurecdn.akamaized.net
cloud-status.dimensiondata.com
cert00066-azurecdn.akamaized.net
store.progress.com
statuspage.io

Certificate

The complete raw certificate details for www.progress.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zm/thd6lT0SndpPRTHq
XmNGjCiKai/QtA/8LcJa5JYNpKA3EYiw0Qw2vq+I0vxtjEjXQ9VZdahUtW/1zMB9
98lL1T/iSaSF4BJPu2YSyVrBzc0OaEcicYAyPv6rs4BZAY5DzsWoQRf1WVoOYPya
Ht57tvFn/bD0mghpSVqIrpf1lV1HVP1O+EA5GM3fWo1sZOAFr5eDjZwJwkk7Cjis
pSIqb6+GcDLsgLuG1xssFcXoKHlBU1wWXRyyR1VqWMER397kI3OvRe2SacImLXFn
E1R/bnaaYAN9SLmb3tPQdYtTfn3fOZQmK4+D870T779eIMW3HG6TlvRIccYziNop
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492447792372354332516939766079908750012298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-18 18:26:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-25 16:21:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bedford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Progress Software Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.progress.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29189525477419004446984603662254544223590804628433614166866812071315640007413202522848547739879399663168862059607311021587616513029055115676837456246034254330119526990107178898482789899630940579716923082623547404967567268987709133659961168340870871697374533748769784240147488251687726933043761555528767680756416254404126143344949487967989132670179877397983548880951299364934375223929190582264290043196539796008637381119677384464773238072881598737604749491334659861407724521691935262275239691637779383904754757892599698274222113354927407223015501875153347196658570452837571458087607698604708324919243163150779762223523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (378 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.progress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.progress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datadirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datadirectcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progress-software.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progress.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progress.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progress.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progress.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datadirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datadirectcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progress-software.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progress.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progress.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progress.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progress.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progress.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99edad7e9ad08339718e7f06f3affff473bb3b2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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