lauf.heel.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f8:34:dd:f4:c9:d4:80:ce:b2:1e:65:63:88:39:ce:d2:ae was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lauf.heel.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:34:dd:f4:c9:d4:80:ce:b2:1e:65:63:88:39:ce:d2:ae
Serial Number (int): 345797157109958601198140461666533238559406
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:c1:aa:5b:00:19:7c:60:ae:0e:ac:e4:65:47:ac:1e:67:06:82:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:a5:79:89:b7:2a:6b:34:36:7d:2b:4c:63:10:30:fe:32:2b:58:8f
Fingerprint (sha256): d7:68:75:4e:b4:e4:69:e7:5e:c7:b0:37:3b:88:5e:8d:06:b6:9d:24:76:08:3f:d0:ce:fa:ec:68:30:9d:a8:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lauf.heel.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lauf.heel.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lauf.heel.de

Other certificates including the domain name heel.de

(limited to 100 certificates)
lauf.heel.de
lauf.heel.de
lauf.heel.de
lauf.heel.de
heel.de
karriere.heel.de
karriere.heel.de
heel.com
heel.de
heel.de
www.heel.de
heel.de
karriere.heel.de
heel.de
heel.de
heel.de
karriere.heel.de
heel.de
lauf.heel.de
secured.heel.de
heel.com
heel.de
heel.de
secured.heel.de
heel.de
secured.heel.de
www.heel.de
karriere.heel.de
*.heel.de
secured.heel.de
secured.heel.de
karriere.heel.de
heel.de
secured.heel.de
heel.de
lsac.heel.com
lauf.heel.de
karriere.heel.de

heel.com
lauf.heel.de
*.heel.de
karriere.heel.de
heel.de
heel.de
lauf.heel.de
heel.de
secured.heel.de
heel.de
karriere.heel.de
lauf.heel.de
karriere.heel.de
*.heel.de

Certificate

The complete raw certificate details for lauf.heel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISA/g03fTJ1IDOsh5lY4g5ztKuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMzEwMTQ4NTdaFw0x
OTA2MjkwMTQ4NTdaMBcxFTATBgNVBAMTDGxhdWYuaGVlbC5kZTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAMuOLOTtOANbh8G+GwxluzrvuuM/UJhpNwN3
Hv2KywYf9R4pLtd6wJJzyymPi2lhNEddPu0akVoHd8JVGC3ZsJLfgTnhzHwhqHcW
AzYFdZJjvMlnjQN/3D0TfthUjbYXETf3BoxxMt5ycgKnUwfiErSkeI+LpIvt06GK
T9AmbjeK0gtjnNIY+htJHqe3BhBJjWeINXz/+U3zfmnJjWxNmHIttuT81xxNJPw9
+vfu8QV/BYvfmyX64msGkh0FR74XcV/JROnpvfbh3Wx1jdYHTwOmI9mfcHOu6j9a
7ZfY5WeIIUgE2dex9CcTWBbD2F+DE0dqI6OoF41vxISmz37mUYrAx30s1jrjE9rJ
blwCNedtcDJWdoq5ibk9SIoyGGdiCZfW4gV1VOaLaW/zuJDTE65M6OI8SAqy+E0h
ZdYRKpfXvkX9rwSBmONzbedCcgCSGf7xtC4CMl9ir9UxiM7p87c2jJYwRG5LNFSB
AhPbg0gh4rsaB+ddK5r/3d3nRiUZWCYXZsNUR8qmICareJQdY5NPLzg+MKvSJuJa
O6AD/XqKGDkSbmvdN8v3pq80W219WvBh2s7zFO9tAbSCxDo8uzN+UAhXpeIPw5aZ
i7crMYuPuamfVOIQmd09vBfyiCZKZAp86iDJj05oDqsh2da87SOXsjuNILkle6Hz
5kdnYkwdAgMBAAGjggJiMIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIXBqlsA
GXxgrg6s5GVHrB5nBoK7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMbGF1Zi5oZWVsLmRlMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx
AHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFp0aZpMgAABAMA
SDBGAiEA2KQkEIAyn5tdnxRH+QEP/Nn4HI1TWQJIdlVXgHqGcooCIQD6f2D7bIhV
Bm2gGKKE7QWZi18DOUZO1cVX/yiGGD2CWwB2AGPy283oO8wszwtyhCdXazOkjWF3
j711pjixx2hUS9iNAAABadGmaagAAAQDAEcwRQIhALE61LeHWKADWQDrrdL0edyI
mvkzem3ObqtxmRb1HyMXAiBx2ksVDtSlnoJU9eeQA1jq2MOnAcK6tUBf6vDOyMmc
bDANBgkqhkiG9w0BAQsFAAOCAQEAEuwIZaUES/MfBQ3CQ0zX1uCpS47VoOfCq3MC
XPZApOSiqR0TzcYjSmAXdNikeKDEz9ZzSC87ar/qfL2nlG0IGEAO2j6K1lZlsLra
PVLKp3yaQL4fvzPJ4bpIEY4V9BtZ2lEPm14ZtdodxpvhACdDBTo3/Dv5LOHqAguY
ldwKZpxjwIGAJ7tZpkkaMUrHLFjVlSMOdG9tM9E0hvMw3AGhXWQ9h0he0VP4bApp
i/ucFy2lfJ6383iIPbaTHvUY18nTcYzrS1La7dtUPEDflC8Bw34RG1pLPJJENRNR
C74NpdyQF8slOwnT7K+8Vqq796D3IG1P1uCz9Z9iFFIL5GRRpA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy44s5O04A1uHwb4bDGW7
Ou+64z9QmGk3A3ce/YrLBh/1Hiku13rAknPLKY+LaWE0R10+7RqRWgd3wlUYLdmw
kt+BOeHMfCGodxYDNgV1kmO8yWeNA3/cPRN+2FSNthcRN/cGjHEy3nJyAqdTB+IS
tKR4j4uki+3ToYpP0CZuN4rSC2Oc0hj6G0kep7cGEEmNZ4g1fP/5TfN+acmNbE2Y
ci225PzXHE0k/D369+7xBX8Fi9+bJfriawaSHQVHvhdxX8lE6em99uHdbHWN1gdP
A6Yj2Z9wc67qP1rtl9jlZ4ghSATZ17H0JxNYFsPYX4MTR2ojo6gXjW/EhKbPfuZR
isDHfSzWOuMT2sluXAI1521wMlZ2irmJuT1IijIYZ2IJl9biBXVU5otpb/O4kNMT
rkzo4jxICrL4TSFl1hEql9e+Rf2vBIGY43Nt50JyAJIZ/vG0LgIyX2Kv1TGIzunz
tzaMljBEbks0VIECE9uDSCHiuxoH510rmv/d3edGJRlYJhdmw1RHyqYgJqt4lB1j
k08vOD4wq9Im4lo7oAP9eooYORJua903y/emrzRbbX1a8GHazvMU720BtILEOjy7
M35QCFel4g/DlpmLtysxi4+5qZ9U4hCZ3T28F/KIJkpkCnzqIMmPTmgOqyHZ1rzt
I5eyO40guSV7ofPmR2diTB0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345797157109958601198140461666533238559406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 01:48:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-29 01:48:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lauf.heel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830433468063023987784248601449985554278794356960320250898341067421187500247826095209611542355186445463003963033306442662285911351210139802236547599485745650776212570372231716724710730490967549385202815600484219755065755282760039512358077743992629987825251868080907628013861334048441349296492619259079357085895122549383128875251923416057951522404013946576514848347175338729429115105444158515126851462334780914400945398962228487315540137360582400646282185246400609363539339871405195968593631948272424594260691896534352289160401147935655359487164326882712835383164147386402199360047493932603437156259505589386342703109798591363552611443370973626665736308402284615441587556275117047971814404817555885567306524759213061315861847799129052665820409398447323644701483632646786404791143385295081945911001987387904801714308087010535698524532854817105628097134811363803400905693252869911370835154998980592833339708954584735069676665985044963934538267064556151800347385203494396623764329870558771879999109629383673327344666099835607349297708214695577559902131992903354000337227385130499382365393593093289460491698300574639105983429826368389758492797388645465043368111248783269306171435582780162586537302850353976567748771644864719474817742556189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85c1aa5b00197c60ae0eace46547ac1e670682bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauf.heel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169d1a669320000040300483046022100d8a4241080329f9b5d9f1447f9010ffcd9f81c8d53590248765557807a86728a022100fa7f60fb6c8855066da018a284ed05998b5f0339464ed5c557ff2886183d825b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169d1a669a80000040300473045022100b13ad4b78758a0035900ebadd2f479dc889af9337a6dce6eab719916f51f2317022071da4b150ed4a59e8254f5e7900358ead8c3a701c2bab5405feaf0cec8c99c6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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