mcyclo.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0c:85:6e:22:b2:4d:52:c9:4f:85:f6:76:94:28:db:b1 was issued on by Amazon.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mcyclo.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:85:6e:22:b2:4d:52:c9:4f:85:f6:76:94:28:db:b1
Serial Number (int): 16643545245599859702061513009328085937
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d6:e4:0f:f1:b3:12:83:b3:d1:a9:84:52:a0:a2:db:f0:48:a1:bb:5c
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): e6:68:8f:ca:f9:45:b5:c0:08:ca:2e:4a:30:23:a0:7c:cf:c9:29:77
Fingerprint (sha256): 02:1b:01:95:1b:cc:86:d7:4d:fe:a6:45:1b:21:6e:7a:a1:f2:8e:0f:4f:9e:87:56:38:31:c8:44:3b:4c:ac:94

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate mcyclo.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mcyclo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mcyclo.com
basf-catalystsmetals.com
revylok-fungicide.com
seeds-excellence.com
agsolutionsfinder.basf.gr
mdizero.net
mdi-zero.com
cevya-fungicide.com
surtain-herbicide.us
labatalladelrugoso.cl
www.newtrition.com
www.nutritionvirtualassistants.basf.com
labatalladelrugoso.co
help.myencircle.com
mdi-zero.eu
msds.chemetall.basf.com
labatalladelrugoso.ar
www.basfsonatrachpropanchem.com
stephankothrade.eu
pac.basf.us
yields.basf.us
verdictherbicide.com
revylok.com
klimaneutralesmdi.de
surtain-herbicide.com
dirkelvermann.eu
climateneutralmdi.com
zoomlab.com
mdi-zero.de
carbonneutralmdi.com
epoxiconazole.com
winningfungicides.com
www.test-virtual-aroma-assistant.basf.com
mdizero.de
join-agrostart.com
stoneville-varieties.com
basfretailfirst.com
lupranat-zero.com
joinagrostart.com
soybeanwholeacre.com
training.myencircle.com
lupranatzero.eu

Other certificates including the domain name mcyclo.com

(limited to 100 certificates)
mcyclo.com
mcyclo.com
mcyclo.com
mcyclo.com
acronaloptive.com
mcyclo.com
mcyclo.com
certainweedcontrol.com
certainweedcontrol.com
mcyclo.com
www.glysantin.net.cn
staqrd.com
mcyclo.com
lupranatzero.net
mcyclo.com
*.mcyclo.com
mcyclo.com
www.mcyclo.com
mcyclo.com
certainweedcontrol.com
staqrd.com
mcyclo.com
mcyclo.com
certainweedcontrol.com
mcyclo.com
mcyclo.com
mcyclo.com
www.glysantin.net.cn
certainweedcontrol.com
certainweedcontrol.com
mcyclo.com
mcyclo.com
mcyclo.com
acronaloptive.com
mcyclo.com
lupranatzero.net
mcyclo.com
certainweedcontrol.com
mcyclo.com

Certificate

The complete raw certificate details for mcyclo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr26JGqhTZdvw6soVtC0y
vAbuXVY+L8+EZgfprRiDQwQ6zZ1CpHEIN2bsKQvRnnBxcnmzbyhHWCjnU6IXkmmp
4xytmITXnLGKSitHfI1eof04ck7nHFJMMgLqEzV+7/3adEqv4biR8WZolY72sR1X
J3GbGHHni5wICOTVu9ZRROjDRtRbdPlHnHGqiPOpYbW3feXfG8JQVt5FZEpCyCcJ
PgfhWm2QLeW1mZLahhPA5alAi4NN4QS/vMExOuz/3IQUtMgyNWVqgcldC8CrUgio
i1NVKL16SN4cvP73gRPI8rYDmX9MrRbceT5QefzDlMS87Ab6wvzMUQ4NjGSwswq3
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16643545245599859702061513009328085937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mcyclo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22146210486689330906138266782217515670055453292527031994301011915149169609294076219274443094555881056012312697957719569237614543142002060892369743976084315230658184361253823892509247031861377056762716276365230787318934307590909015551573105227888783258892898796054390876459004784419314584423399919989262596020312814887011309570306393574934784495208500799316052937945800453440907267159458204935509348915467783640821951229254267764197620252958528687359877215138836993790452275493145781116740196729793764269263890950352814137874775115139241641085533643761577346373492465711083433513646108976004555175707398302461846009669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6e40ff1b31283b3d1a98452a0a2dbf048a1bb5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (890 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcyclo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-catalystsmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revylok-fungicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeds-excellence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsolutionsfinder.basf.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdizero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdi-zero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cevya-fungicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surtain-herbicide.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labatalladelrugoso.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutritionvirtualassistants.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labatalladelrugoso.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.myencircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdi-zero.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msds.chemetall.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labatalladelrugoso.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfsonatrachpropanchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephankothrade.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yields.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdictherbicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revylok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klimaneutralesmdi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surtain-herbicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirkelvermann.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climateneutralmdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoomlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdi-zero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonneutralmdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epoxiconazole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winningfungicides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-virtual-aroma-assistant.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdizero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join-agrostart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneville-varieties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basfretailfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupranat-zero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinagrostart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soybeanwholeacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.myencircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupranatzero.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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