suggest.factiva.com

- Dow Jones and Company -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:c3:63:2a:c3:2d:4a:1b:b5:50:8a:dc:7e:65:9e:80 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dow Jones and Company

Organization: Dow Jones and Company
Organization unit: Factiva
State / Province: New Jersey
Locality: Princeton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:c3:63:2a:c3:2d:4a:1b:b5:50:8a:dc:7e:65:9e:80
Serial Number (int): 7660649212876786409848496049040498304
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 28:8a:2c:e5:85:43:f5:8e:8b:01:b0:f9:12:e0:22:44:52:30:7a:21
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f8:27:b0:13:fc:61:f5:2b:8a:c6:60:71:87:00:79:4b:94:ff:fd:d0
Fingerprint (sha256): 00:ec:bd:50:43:09:32:9c:7b:09:89:aa:3d:9e:85:ef:b2:3e:8d:a3:8f:86:fd:2b:8f:22:d6:86:04:51:d9:f6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate suggest.factiva.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for suggest.factiva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

suggest.factiva.com
suggest.dowjones.com
suggest.wsj.com

Other certificates including the domain name factiva.com

(limited to 100 certificates)
MOBILE.FACTIVA.COM
MANAGENV.INT.FACTIVA.COM
pfafeed.factiva.com
globalx.int.factiva.com
fce.int.factiva.com
global.factiva.com
suggest.factiva.com
accounts.dowjones.com
select.factiva.com
suggest.int.factiva.com
partner.factiva.com
MARKETDATA.DEVELOPER.BETA.FACTIVA.COM
select.int.factiva.com
global.beta.factiva.com
utilityhandlers.stg.factiva.com
securepartner.factiva.com
accounts.dowjones.com
newsplus.wsj.com
u1.utilities.int.factiva.com
ssl.wsj.com
labs.int.factiva.com
taxonomy.developer.beta.factiva.com
developer.factiva.com
www.factiva.com
IWORKS.BETA.FACTIVA.COM
ssl.wsj.com
reader.beta.factiva.com
global.beta.factiva.com
pfa-fmt.factiva.com
rss.factiva.com
newsplus.wsj.com
viewer.factiva.com
MEMBERSHIP.DEVELOPER.BETA.FACTIVA.COM
origin-global.factiva.com
customer.int.factiva.com
u1.utilities.factiva.com
DEVELOPER.BETA.FACTIVA.COM
IWORKS.BETA.FACTIVA.COM
MARKETDATA.DEVELOPER.BETA.FACTIVA.COM
INTEGRATE.FACTIVA.COM
*.stg.dowjones.com
salesworks.factiva.com
global.factiva.com
pfafeed.factiva.com
suggest.dowjones.com
REGISTRATION.DEVELOPER.FACTIVA.COM
REGISTRATION.DEVELOPER.FACTIVA.COM
salesworks.beta.factiva.com
djce.factiva.com
developer.beta.factiva.com
www.dowjones.co.jp
DEVELOPER.INT.FACTIVA.COM
u4.utilities.factiva.com
insight.factiva.com
pfa-fmt.factiva.com
utilityhandlers.factiva.com
*.dowjones.com
delivery.rnc-feeds.dowjones.io
m.int.factiva.com
DJCE.FACTIVA.COM
global.factiva.com
accounts.dowjones.com
publisherportal.factiva.com
TRACK.DEVELOPER.FACTIVA.COM
djlogin.beta.dowjones.com
companyprofile.developer.factiva.com
pfa.factiva.com
READER.FACTIVA.COM
GLOBAL.FACTIVA.COM
www.factiva.com
utilityhandlers.factiva.com
pps.factiva.com
publisherportal.factiva.com
pfa-fmt.factiva.com
integrate.factiva.com
MEMBERSHIP.DEVELOPER.FACTIVA.COM
global.beta.factiva.com
salesworks.int.factiva.com
pfa-ei.factiva.com
PFA-FMT.FACTIVA.COM
logos.factiva.com
accounts.dowjones.com
search.developer.factiva.com
widgets.factiva.com
*.dowjones.com
u5.utilities.factiva.com
suggest.int.factiva.com
global.int.factiva.com
integrate.stg.factiva.com
accounts.dowjones.com
rss.factiva.com
accounts.dowjones.com
BRIEFINGS.FACTIVA.COM
global.stg.factiva.com
*.factiva.com
global.factiva.com
developer.stg.factiva.com
mrm.int.factiva.com
ewb.factiva.com
pfafeed.factiva.com

Certificate

The complete raw certificate details for suggest.factiva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz2HLZQ0O4CLD6lVTVXC
8JJ9vW7gNw8zUbmG5in3eQp3HxjUoD14Am+pLXANkuMJQ5B3lB8Khj4yE89Kv6nF
lpwbd1gvVGYlQecJQ2OEbCkF03mpacYIRn4J46iOVhEBquCm6+eSmRJTMyhTVdHQ
HjXD9Ey40+Am7BeyO7bC6QfEBfY0SGNxprT20lIaYtbNG82UKw/9qVz/A2agWpaM
V8h32aYYN47QPpXjJrVvRDW7BUYv6/g44pCDwfF7T5+om05YKiXGP0ocXyFYp9ux
x1Yd8WmjdO/7NtJyPFVJKP8YhkIPUVEeLMyDsfM9FuzLwITz6ZAUmNPfWAZFir34
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7660649212876786409848496049040498304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dow Jones and Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Factiva'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'suggest.factiva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17577464997235952725699235647755543608795801426535867780753364680295168033343906469466487719058455974523899308553174921792190408235839817076557952606738767606640531928642541682103274462747050134065182269583031405369873668626451223682356495541025892236192061816357504145937045729014470351459434636698344566672301349474064703797065001577167435972172406425810456891343271982306550173934667488313971367808658391673907073169398202701109294826655841475740351279357190147594298542737750604503813943414617831980781693580616887440949342572144011209079864969137187986350394427956556760715778530119222974648498022071918122629179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							288a2ce58543f58e8b01b0f912e0224452307a21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suggest.factiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suggest.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suggest.wsj.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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