www.mappoint.com

Issued by Microsoft RSA TLS CA 02

About this certificate

This digital certificate with serial number 2d:00:2d:48:44:ed:6e:91:9a:70:c0:5e:2e:00:00:00:2d:48:44 was issued on by Microsoft Corporation.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mappoint.com

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:00:2d:48:44:ed:6e:91:9a:70:c0:5e:2e:00:00:00:2d:48:44
Serial Number (int): 1003548942702697057730249770831296675292465220
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: c3:ba:d7:a7:54:2e:cb:83:dc:46:cd:ee:db:00:6d:88:e0:e1:04:48
AuthorityKeyId: ff:2f:7f:e1:06:f4:38:f3:2d:ed:25:8d:98:c2:fe:0e:f6:6c:fc:fa

Fingerprint (sha1): a5:69:c2:67:ff:59:bd:50:67:c9:1e:1a:2b:27:c5:38:83:b7:9e:0b
Fingerprint (sha256): 02:de:61:24:cf:63:63:20:e9:06:e3:f7:52:0c:ff:73:09:5a:f7:3e:a5:83:9b:33:58:e8:1f:bf:94:f9:7a:05

Issuing Certificate URL: http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt

Revocation information

OCSP Server: http://ocsp.msocsp.com
CRL Distribution Point: http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl
CRL Distribution Point: http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl

Check the revocation status for certificate www.mappoint.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mappoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mappoint.com
mapblast.com
mapblast.net
mapblast.org
mappoint.com
mappoint.fr.msn.be
mappoint.latino.msn.com
mappoint.msn.at
mappoint.msn.co.uk
mappoint.msn.com
mappoint.msn.de
mappoint.msn.fr
mappoint.msn.nl
mappoint.sympatico.msn.ca
mymapblast.com
www.mapblast.com
www.mapblast.net
www.mapblast.org
www.mappoint.msn.com
www.mappoint.msn.de
www.mymapblast.com

Other certificates including the domain name mappoint.com

(limited to 100 certificates)
www.mappoint.com
mapblast.com
www.mappoint.com
www.mappoint.com
www.mappoint.com
www.mappoint.com
www.mappoint.com
mapblast.com
www.mappoint.com
www.mappoint.com
www.mappoint.com
mapblast.com
www.mappoint.com
mapblast.com
www.mappoint.com
www.mappoint.com
www.mappoint.com
www.mappoint.com
mapblast.com
mapblast.com
www.mappoint.com
mapblast.com
mapblast.com
mapblast.com
www.mappoint.com
mapblast.com
mapblast.com
www.mappoint.com
mapblast.com
mapblast.com
mapblast.com
www.mappoint.com
mapblast.com
mapblast.com
www.mappoint.com

Certificate

The complete raw certificate details for www.mappoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ccReU2vGLiLknymRNBb
EpIbJ5wHSc/OEIVajJ/4uLhdKO/+yUz5IDrXRRCx6Co5Qr1lzxJJIs1LDN5dWb4V
wVaGai23CiPIzxPIC8VMpS5stiIXO75giR9dzCeTStflE5ONZjhzAtySBKtSH+TV
FFrqRRHfuQHN92SPe4nu25D0Axt+92l1JlDuO3eVFDptbdN38yKWFH3xuopg1+Xz
H+g2gsjTF8hwBSe72sh9+0RGWvOfDIJ0RI1Si07DPeFRThHk5wgRP1xMlLhvYNwH
KNWiXnYmzANO7O84lpETT2fltRbYWWaN/odz4OTdm4cNPzsmxv8C4OW/ahFYkwKh
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1003548942702697057730249770831296675292465220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft RSA TLS CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-12 19:25:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-12 19:25:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mappoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30016642493208600419754837426204902383396513497695378546311871727654034997515241985115930331526460682537142332235707677692074729710045178645157867021314334157326953890132713799080788282999944304197024482327116016766317043871045247904803050994727981690623099526725267840003224120499089971449264953015974548866024211844796005978032208964225886645911087101192263856312748339398706262986972725861491984314825495546343213593762996917783791011198937079357688723070881496286039491397963961816620988273707965208272622745933253758615170659353894674728198647702641301399224493470111070810432600025240798559192276164766297399553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16155509.8105089.5391003.2969441.12400096.221.10585921.15764560
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2002.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.msocsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3bad7a7542ecb83dc46cdeedb006d88e0e10448
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (389 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mappoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapblast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapblast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapblast.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.fr.msn.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.latino.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.msn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.msn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.msn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.msn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.msn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappoint.sympatico.msn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymapblast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapblast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapblast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapblast.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mappoint.msn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mappoint.msn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymapblast.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.42.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pki/mscorp/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ff2f7fe106f438f32ded258d98c2fe0ef66cfcfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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