nli.no
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:79:3b:2f:38:7f:a2:8f:68:1f:e0:8a:66:b3:e2:7e:57:34 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nli.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:79:3b:2f:38:7f:a2:8f:68:1f:e0:8a:66:b3:e2:7e:57:34Serial Number (int): 302589693828345179575842412107519670245172
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 23:fa:cf:c1:f7:5c:d7:97:a3:4d:4f:95:29:51:80:e7:2d:e0:27:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7f:27:bd:9f:de:d0:e6:ab:81:ea:2d:d7:39:1b:00:f7:48:00:4f:e8
Fingerprint (sha256): ca:5d:63:92:d4:72:e4:4d:5f:b4:bb:70:9a:4c:a3:8f:a2:8d:81:98:95:e8:c0:d5:02:38:cb:82:07:c0:a4:95
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate nli.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nli.no
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nli.no
www.nli.no
www.nli.no
Other certificates including the domain name nli.no
(limited to 100 certificates)
mail.nli.no
nli.no
mail.nli.no
lsrp.nli.no
nli.no
nli.no
lsrp.nli.no
sip.nli.no
conferencing.nli.no
sip.nli.no
lsrp.nli.no
conferencing.nli.no
nli.no
nli.no
mail.nli.no
nli.no
nli.no
sip.nli.no
mail.nli.no
nli.no
mail.nli.no
nli.no
ocscontent.nli.no
mail.nli.no
nli.no
mail.nli.no
mail.nli.no
sip.nli.no
nli.no
nli.no
nli.no
nli.no
lsrp.nli.no
nli.no
wfm.nli.no
wfm.nli.no
lsrp.nli.no
ocscontent.nli.no
sip.nli.no
sip.nli.no
nli.no
mail.nli.no
lsrp.nli.no
nli.no
nli.no
lsrp.nli.no
sip.nli.no
conferencing.nli.no
sip.nli.no
lsrp.nli.no
conferencing.nli.no
nli.no
nli.no
mail.nli.no
nli.no
nli.no
sip.nli.no
mail.nli.no
nli.no
mail.nli.no
nli.no
ocscontent.nli.no
mail.nli.no
nli.no
mail.nli.no
mail.nli.no
sip.nli.no
nli.no
nli.no
nli.no
nli.no
lsrp.nli.no
nli.no
wfm.nli.no
wfm.nli.no
lsrp.nli.no
ocscontent.nli.no
sip.nli.no
sip.nli.no
Certificate
The complete raw certificate details for nli.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA3k7Lzh/oo9oH+CKZrPiflc0MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDkyMjExMzFaFw0y MDAzMDgyMjExMzFaMBExDzANBgNVBAMTBm5saS5ubzCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAKpbgqxTj5FM8zX8j0IgeGu6N/ky0NFRpNZgtesar8JS XdIgo6h9Z8L3lGfM1aXX3Cj0y4YAdDaV2O3ZYk42Tji15nY168p9Hiaqam5+P1/s LrdmJ6Bk5I0mM2D34rmh7uA2PaVH5dsgNrZX4uPu4yRiG2XmvyQGHmAAc7qc565W AWny8lMuOuKmJKD6xGawEreO5Ccpm3jj6bHBKId/af5uc+MXEr6fBgDA3ltX158/ BKjRsO8F4MkU18E3/eX2jwM5sfm7haT4tltdG/GpwVGYGV3G24myuIRrGBSFm59M SDI6KbcB+jPNIeBh193BMOPoTLXjOY4+rtzNpeGevPLtvBr9Lqt52mlpXulXGIK5 vEPIUP8MfX9ZDTuTpubRy06gPiWClHdmhGbSQkE7u8DbctNBQ00G2UxvObPhNiX8 47TC+1DnA9M1U6cFFB+O87Oi+9eLhealLJCKuztVXUZ+Q/E2yX04YkFE/n2gew2Q a8kBuiPDOXu3xx6zBka5WN0eckz8lwXJRvGRxk7ducyVpCa0EG1xYaQ2QngnpXuB +Jsoa5jtEYJOh5u4ZbBHgqr6eKqddXX2NKtpcSLaZOZd8pnYa/G5r2FSnkGf0Lkp RjhfJkb01HnOBZV+U8YgqIAh+tcgtM//mWmHwSMkSWyesWPuVew0/loFOpn/5BTR AgMBAAGjggJoMIICZDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCP6z8H3XNeXo01P lSlRgOct4CfhMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIIGbmxpLm5vggp3d3cubmxpLm5vMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFu7O6dVwAABAMA RzBFAiByV3mPuxSnZts4g4t0vlcO6yM64eDJeVHcwrdms3MUZgIhAJmA9E53KVwo PF7LvpYweHNLx6CL1EismaNFDLVrfeiAAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeU t2ruvGE6GmnTohwAAAFu7O6drwAABAMASDBGAiEAjXnZ1ya9gVoOyVeJ/oitQb+k Qs7pG0I8emfFFAcBGKwCIQCVBAvZo0bzC9u+voDRPc9rJNCm6BewJAUXKsLELHWU ATANBgkqhkiG9w0BAQsFAAOCAQEADlbHjjk94ldRUcwg5apO5Rz7KJhmXzjVpIYb 1uP7AIxwWZT6qfsLYUCbp+wszJybGQhi2HaMgwbzi9LRCJmVQw2ebLBGnlQJr9ua Dc0x+pLrQcrxAIyhK7hcBjwTJGMLWGTEsHOH4tM/ZHmhE10Fus16w+5Dwrd2kt68 k9aTn8NDdw39bRCKhcJxlTZlGFaMFNF+b6+WKI42Rqe7agZUWvaj8YqMrC2/kOps bc5w5hmrvqRU9RVrROR0GE1YxHBmt4votZfec2JgErciTeKdQRjLrj3MTjx0zKGj rZ4FWur2yQhZn//wzCpE8BzprQ1eXCo4y1E0mAzWM/j9IglqFg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqluCrFOPkUzzNfyPQiB4 a7o3+TLQ0VGk1mC16xqvwlJd0iCjqH1nwveUZ8zVpdfcKPTLhgB0NpXY7dliTjZO OLXmdjXryn0eJqpqbn4/X+wut2YnoGTkjSYzYPfiuaHu4DY9pUfl2yA2tlfi4+7j JGIbZea/JAYeYABzupznrlYBafLyUy464qYkoPrEZrASt47kJymbeOPpscEoh39p /m5z4xcSvp8GAMDeW1fXnz8EqNGw7wXgyRTXwTf95faPAzmx+buFpPi2W10b8anB UZgZXcbbibK4hGsYFIWbn0xIMjoptwH6M80h4GHX3cEw4+hMteM5jj6u3M2l4Z68 8u28Gv0uq3naaWle6VcYgrm8Q8hQ/wx9f1kNO5Om5tHLTqA+JYKUd2aEZtJCQTu7 wNty00FDTQbZTG85s+E2JfzjtML7UOcD0zVTpwUUH47zs6L714uF5qUskIq7O1Vd Rn5D8TbJfThiQUT+faB7DZBryQG6I8M5e7fHHrMGRrlY3R5yTPyXBclG8ZHGTt25 zJWkJrQQbXFhpDZCeCele4H4myhrmO0Rgk6Hm7hlsEeCqvp4qp11dfY0q2lxItpk 5l3ymdhr8bmvYVKeQZ/QuSlGOF8mRvTUec4FlX5TxiCogCH61yC0z/+ZaYfBIyRJ bJ6xY+5V7DT+WgU6mf/kFNECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302589693828345179575842412107519670245172 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 22:11:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 22:11:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nli.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694997812000280625163562292764207504428885867242839779876932154700727404855405638422758221565816507102755383560896000132487789784695895868310453145729779508035692978084938787062283118158717726498823835736206044910439674721612802438554703908167966831060296967046513570645973351565412497856340672366304873295467957907495645427365613986574534183729975035209105274604297319820377095322642361961768490131776078425499446404376924016631018065513595000192488680671935127964549989641697434099915647091398990137626952089485947139599915219172120333857740045236033274269702873785536981966077691485549252050768314724526300115905367989173348561894558598256776099741921007116838313969568925331447491024805200843211825730298750935278288880255210889429765390917569850524635084519183715712485025752848250020747895162046170957287776961849518134619900164411112104308526278370936624366411785652483172219148714571103084612715542984817761773033503841899912595748306182237836551740460341407773305925923575786099803564998846577670074736875160643403406315358221233109907237372713672635058201478707752570944143382371610362080871390998963735665996238652927377902919053428955839376700192328832956665213450943451202642874711640079354003899154099560767846917346513 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 23facfc1f75cd797a34d4f95295180e72de027e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nli.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nli.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eecee9d57000004030047304502207257798fbb14a766db38838b74be570eeb233ae1e0c97951dcc2b766b37314660221009980f44e77295c283c5ecbbe963078734bc7a08bd448ac99a3450cb56b7de88000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eecee9daf00000403004830460221008d79d9d726bd815a0ec95789fe88ad41bfa442cee91b423c7a67c514070118ac02210095040bd9a346f30bdbbebe80d13dcf6b24d0a6e817b02405172ac2c42c759401 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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