www.wellsfargoassetmanagement.com

- Wells Fargo & Company -

Issued by Wells Fargo Certificate Authority WS1

About this certificate

This digital certificate with serial number 04:11:df:6c:00:19:18:94:f4:88:21:e4:48:cd:27:e7 was issued on by Wells Fargo.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: TMS-ADCS
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo

Organization: Wells Fargo
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:11:df:6c:00:19:18:94:f4:88:21:e4:48:cd:27:e7
Serial Number (int): 5409712563748260654377695334812690407
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 40:65:87:27:ed:be:a3:50:c0:a2:a2:c8:1f:de:09:a5:77:bb:b0:9f
AuthorityKeyId: fe:08:e3:63:85:07:7e:f5:00:58:89:b3:89:a9:4f:ed:0f:0a:41:4f

Fingerprint (sha1): 13:c9:73:a3:fa:6d:c7:c5:b8:ec:85:e9:16:13:b5:f1:7b:6a:ca:65
Fingerprint (sha256): d2:4d:09:90:94:1e:cc:8b:fa:6b:0d:5a:d7:fc:8f:90:4e:a5:98:b2:7b:cc:2f:ca:d8:c4:0c:f2:5a:93:72:b6

Issuing Certificate URL: http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer

Revocation information

OCSP Server: http://mssl-ocsp.ws.symantec.com
CRL Distribution Point: http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl

Check the revocation status for certificate www.wellsfargoassetmanagement.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wellsfargoassetmanagement.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wellsfargoassetmanagement.com
lb968mnsvdc-www-wellsfargoassetmanagement.wellsfargo.com
lb982aztmpe-www-wellsfargoassetmanagement.wellsfargo.com
wellsfargoassetmanagement.com

Other certificates including the domain name wellsfargoassetmanagement.com

(limited to 100 certificates)
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com

Certificate

The complete raw certificate details for www.wellsfargoassetmanagement.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAJ4bjcmeY4BfFRFLRpV
DLgUGOaM9N2Sxt+9J9CnOME2PDMRqCGKelO7EU1TmmS2rUVtaKEsh6iXWLjEQN5p
rCOy0dZcoV/RbLr4kAn/3wQEV2kbxHOpxphS12e4QTbS/SLc7DKmEyZG3LdtnhY7
voZbu00IzIhtvzarVdF+g/2vQeWvjDDm/9XwtvJDHT6ZXCKP+VceM0uIgYuppE8o
nJkTzDqeKVxr1y9G5Y5O2djr3PVS+aFdSiMxJdqShMRJB4+P3h2mQJr+G1fSAr1F
DqkxOnLYxne+HCtDdXdu9mf3O4wdMe8cC4KIPIrm6NGEdLDXgK2QG2SDQDT92EQt
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5409712563748260654377695334812690407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Certificate Authority WS1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TMS-ADCS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.wellsfargoassetmanagement.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20199347009870788184015211294871158337718719221886848310699947710125600767701001257392766030731411631353660001988805589592910463783184045779886190203949765969944869049566076164884621502316075835988168816373531261051442648257509969456574686402340627393594245158396679819601303010576227288342049283695969228398020333726923818666977245159968361948207925329741602778989897530313295890903536374988551952867512620937082826036614134937644840183442020816514017666768586587935149184106068089601185496251532128314221268729625374923372577256482711121560738083833967316210313823358657447464366481904010520612289498532013433695633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfargoassetmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb968mnsvdc-www-wellsfargoassetmanagement.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb982aztmpe-www-wellsfargoassetmanagement.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfargoassetmanagement.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40658727edbea350c0a2a2c81fde09a577bbb09f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe08e36385077ef5005889b389a94fed0f0a414f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-ocsp.ws.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000154c497bd750000040300473045022100dac7be64786794d435083fb25a4b5f1caf74b1f131dab07fecdf8bfab2131c34022077c0d7bc5a5cec32f0a8440302dc1e77af47b4d00c0b1bb6ac9b05e621c611ba007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000154c497bdb10000040300473045022100e7e01a86325f9c7717f2e1ec48f19125513491ac31c0b6aaa7382b410b9a61fc022067edacff5aadfaf0203b9aed853bb3f4d4ded74822d63844ded5c362e30a019b00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000154c497bdbd0000040300473045022100ad38d7cb1e34f12d9edaedc05285811429e878ac283b357e728fca3cd56d6f53022034cce2a988b0712eb841426df0560b3a7e0c363d13fed34e8ba67f3e8d959a71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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