datahub.mindsphere.siemens.com

- Siemens AG -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 02:e1:20:b7:b7:4d:e6:ef:72:a1:85:43:28:d5:f6:49 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Siemens AG

Organization: Siemens AG
Organization unit: Energy
State / Province: Bayern
Locality: Muenchen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e1:20:b7:b7:4d:e6:ef:72:a1:85:43:28:d5:f6:49
Serial Number (int): 3827386377331159572793719098357184073
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 46:73:f8:ef:ce:39:41:fa:42:de:9b:5d:c7:43:9a:45:3b:fc:71:0b
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): b9:f0:f2:c1:41:b2:02:67:af:b3:fb:d6:4b:a8:61:81:fe:bf:d7:bc
Fingerprint (sha256): 01:07:57:71:45:12:9e:f8:6a:c2:d1:87:19:ca:5e:d9:d8:79:41:5b:46:ec:3e:98:13:6f:5e:bb:c5:95:1a:f9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate datahub.mindsphere.siemens.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for datahub.mindsphere.siemens.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datahub.mindsphere.siemens.com

Other certificates including the domain name siemens.com

(limited to 100 certificates)
brandville.siemens.com
industryservice.siemens.com
tciq10lb.gplm.siemens.com
application-hu.siemens.com
npm.siemens.com
plsccmcmg.industrysoftware.automation.siemens.com
tgsprs.siemens-emis.com
www.medical.siemens.com
sow-int.siemens.com
railmall.siemens.com
ura-mx.siemens.com
vdi-mil.industrysoftware.automation.siemens.com
identityloc2.industrysoftware.automation.siemens.com
mds-mailsync.siemens.com
siemens.com
sts-online.siemens.com
redirects-stage.test.dc.siemens.com
fss.us-east-1.sws.siemens.com
turn65.circuit.siemens.com
btpresales-q.siemens.com
jumphost-us.hccloud.siemens.com
volttest.siemens.com
ppm.usa.siemens.com
dev-publish.aemweb.industrysoftware.automation.siemens.com
w3.energy.siemens.com
api-ws.qa.sensproducts.siemens.com
sensproductsyslog.cloud.siemens.com
www.siemens.com
emmt.siemens.com
mailman.industrysoftware.automation.siemens.com
sharepoint-maintenance.siemens.com
vdesktop-aae2.siemens.com
hit.sbt.siemens.com
dev.ws.duve.siemens.com
portal2.industryservice.siemens.com
myid-qa.siemens.com
EGMRS.siemens.com
citiauth.industrysoftware.automation.siemens.com
origin.dev.cms.c2.dc.siemens.com
beta04.industryservice.siemens.com
solidedge.siemens.com
*.test.teamplay.siemens.com
MysiteQA13.industrysoftware.automation.siemens.com
api-myshare.siemens.com
2013-internet-valid.catestsite.siemens.com
primavera-rdweb.siemens.com
c4b.gss.siemens.com
failover.www.siemens.com
console.monitoring.dev.eu-central-1.sws.siemens.com
ura-mum-in.siemens.com
sw.siemens.com
testing-dgswsus.energy.siemens.com
esurvey.siemens.com
turn02.circuit-test.siemens.com
community.plm.automation.siemens.com
api.dc.siemens.com
circuit-test.siemens.com
mspki.na.entitlement.siemens.com
www.motores.siemens.com
www.pia-selector.automation.siemens.com
productadvisor-demo.mindsphere.siemens.com
winlog01.industrysoftware.automation.siemens.com
elearning-test.healthcare.siemens.com
datahub.mindsphere.siemens.com
extranet.webapp.swe.siemens.com
tcim30v01.gplm.siemens.com
www.csm.energy.siemens.com
data.cdn.siemens.com
smda2.siemens.com
shop.healthcare.siemens.com
login.ias.plm.automation.siemens.com
skb.healthcare.siemens.com
login.siemenswelt.siemens.com
cpq.healthcare.siemens.com
w802.siemens.com
ussciport.medical.siemens.com
s2c-supplier-qa.siemens.com
webtac2.industrysoftware.automation.siemens.com
www.sitrain-int.siemens.com
getpaid.siemens.com
www.ea-testreports.siemens.com
siecus.siemens.com
www.csm.energy.siemens.com
sfdcauth.energy.siemens.com
ura-tok.industrysoftware.automation.siemens.com
health-advisor-dev.mindsphere.siemens.com
ld-academy-test.siemens.com
engage.siemens.com
extranet-backend-ma1.eps.siemens.com
productinformation.healthcare.siemens.com
assetperformance.navigator.siemens.com
dev-fileshare.siemens.com
w3.siemens.com
amc2csg.siemens.com
test-myregistration.siemens.com
*.eightfold.ai
www.healthcare.siemens.com
mspki.rs.entitlement.siemens.com
robotics3dvdi.siemens.com
amc2csg.siemens.com

Certificate

The complete raw certificate details for datahub.mindsphere.siemens.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvncZjhscbviq78CrZ//n
JeU8lWxNpfrKX/xjD5HX8cQOUn84lOEvBZawsOjLH/LjC2rJk9x3QEWOlkJ80wCu
YEIBfp4XjqhI4fp+P9UirgemWLivT2YhpwGxeYdFKBzFUQZvej9T2UhnrMMYl5OD
21mzXiDJTlIm+xSGZ2CUl0Lrk5D0spkzuiJOZZhuZx4rbd378poXy/tZRJ5/bKKP
4dbtLs2NCpK0ZiAtVsj/AaL+SEhH92a2es2tPvlwzWP3BIegn6f86+yaQmWA6pBM
yPoSziW2RLx+ZHLkWh65ZQfAc5qzAw9YI41Dayr62/ZBp2nP6uOpFH5g2P97vm1B
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3827386377331159572793719098357184073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Siemens AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Energy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datahub.mindsphere.siemens.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24044008255977018217475435730048704868059130678769869016467476922018792750945088783929152797031915081004535277647688538839706318938856561698734815664194827879802947416188870450902062541039136993144956954372073323504573279750789034042428942782500192216612969575324501508579451325935358499174558080098625523523413645793325044854648600135948042951508133140059696269353450553647473630704406520009325846251688699021078292297868963400218785482648283488680019042939493094068586780865635854667568130184658370830527014250259792890357047369794883162583270441903307165573970236464810843299638754497098690209164249142131115770311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4673f8efce3941fa42de9b5dc7439a453bfc710b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahub.mindsphere.siemens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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