checkio.reslife.qa.umd.edu

- University of Maryland, College Park -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:f8:9e:65:41:a6:c1:54:84:44:dc:d0:23:1c:2b:ad was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Maryland, College Park

Organization: University of Maryland, College Park
State / Province: Maryland
Locality: College Park
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f8:9e:65:41:a6:c1:54:84:44:dc:d0:23:1c:2b:ad
Serial Number (int): 3949358255566380202540397265013189549
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3a:96:2e:9d:e5:7e:0d:34:0a:41:ef:a9:ae:04:99:bd:27:23:a1:c1
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 13:ce:39:4d:ac:15:b9:b2:df:54:31:5f:fc:02:2e:56:0b:7c:33:10
Fingerprint (sha256): 01:5c:47:cd:07:a0:08:c6:91:d0:c4:e6:bd:98:ea:5d:2d:e0:2a:24:a8:30:02:ab:de:4b:29:20:ee:b9:7e:41

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate checkio.reslife.qa.umd.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkio.reslife.qa.umd.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

checkio.reslife.qa.umd.edu
checkio.reslife.qa.aws.apphosting.umd.edu

Other certificates including the domain name umd.edu

(limited to 100 certificates)
grades.cs.umd.edu
sims.eng.it.umd.edu
sfunder1cert.net
www.see.umd.edu
www.bioscience.umd.edu
legacylamp-faculty.elb.it-prod-cots.aws.umd.edu
calce.umd.edu
test-web-lws.edu.help
kfs.umd.edu
www.recoveringdemocracyarchives.umd.edu
bsos.umd.edu
*.givegab.com
www.umdphysics.umd.edu
view.e.rhsmith.umd.edu
bfs-trans2.qa.umd.edu
oer.umd.edu
hcixdementia.umd.edu
vicarious.cs.umd.edu
user.eng.umd.edu
tin.umd.edu
www.temperamentandnarrativeslab.umd.edu
aast.umd.edu
*.rhsmith.umd.edu
me.umd.edu
universityhonors.umd.edu
lasonline.umd.edu
msmc.umd.edu
rcpsl.ece.umd.edu
ercimpaqt.umd.edu
publish.lib.umd.edu
qa.ccebh.umd.edu
akamaisan.qualtrics.com
www.aast.umd.edu
jmail.umd.edu
diversity.umd.edu
dns-vetting1j.map.fastly.net
umeg.umd.edu
nartc.fcm.arizona.edu
apphosting-tools.qa.umd.edu
*.ibbr.umd.edu
item.umd.edu
copier.umd.edu
umincentiveawards.umd.edu
infosci.umd.edu
cfar.umd.edu
5703789046661120-fe2.pantheonsite.io
dcicblog.umd.edu
balldoolinglab.umd.edu
icdldev.lib.umd.edu
experts.umd.edu
smart.bgr.umd.edu
phr-app4.umd.edu
dev.vaslavehousing.umd.edu
cgunupd1.umd.edu
ITFHR.UMD.EDU
voyager-mac.umd.edu
pm.umd.edu
*.ibbr.umd.edu
jqi-wiki.physics.umd.edu
*.proxy-ce.researchport.umd.edu
diversity.umd.edu
webmeeting-dev.umd.edu
*.givegab.com
viz.umd.edu
tls.automattic.com
sbnpsi.astro.umd.edu
evidlab.umd.edu
dev.msac.umd.edu
checkio.reslife.qa.umd.edu
www.modarres.umd.edu
openknowledge.umd.edu
dev.studentaffairs.umd.edu
sophie-test.umd.edu
*.givegab.com
5639026912526336-fe4.pantheonsite.io
wireless.umd.edu
www.tt.umd.edu
marylandrha.umd.edu
icecube.umd.edu
congo.umd.edu
maestro2-public.it-dev-cots.aws.umd.edu
tls.automattic.com
5639026912526336-fe4.pantheonsite.io
www.arhu.umd.edu
sophie-test.nflc.umd.edu
*.givegab.com
qa.studentconduct.umd.edu
oitap254v.umd.edu
dev.education.umd.edu
fastbreakers.umd.edu
gened.umd.edu
*.cbcb.umd.edu
agnr.umd.edu
eit.umd.edu
ctg-ws.umd.edu
apm1.qa.umd.edu
nxterra.ucop.edu
float.umd.edu
prosamservices.dev.umd.edu
mim-dev.umd.edu

Certificate

The complete raw certificate details for checkio.reslife.qa.umd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9kabKJe44AQmkP2Oy55
nmmzjfjPTKa4Fczw1Xy/0FRUUFnq1C7jKYnzxBZLSlSpUYVx5cGZzc4bEe8G3Cll
F515hakmKaYRQiMd05nKybQiMmjrQTI2z/cUG4NSSM/4y2qvx+WAM71iyvUoAFBf
vMQ9J5tVAsj5Gj9d1TgW+KYYGgbIN/yt3X1Bgx/aK46kNuIxFlufBfhyHiMHX1NV
e/UVmyJXBRmWRFEGlg7Q1n59E+14EM88ciuGB8X3KzBbwDBfIsiCmBbMugPq/TVK
nel3QDnO3RgMXHBqsAC9d9J5eiGjMpY7nl5Au7uaGuFVbfamEeP85R5EDYLUheuk
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3949358255566380202540397265013189549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'College Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Maryland, College Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkio.reslife.qa.umd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17149228758353612966338429795879976091933674004196317227842232967179079546383277323845244492640287272636714110845854711094492398684528475790492367397089811938613753662552390534124153310977137237945888044836304312862627449115890333890049963416968531792796937795199934938280562035858330548570086399739211512582281689436909159876177878148960428809967671276766228475243370862850902109235670187486485539730034878157785519880002871716820123797331357343360183458137356754819536128348850498935113768960656685535460136752010739197704616533045085517497976513876953755385511640073509878043940792878842033859385475734661543732319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a962e9de57e0d340a41efa9ae0499bd2723a1c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkio.reslife.qa.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkio.reslife.qa.aws.apphosting.umd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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