*.springer.com

- Springer Science+Business Media -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0b:49:e3:e2:ad:09:3b:e1:91:31:e3:53:e7:d5:f4:4e was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Springer Science+Business Media

Organization: Springer Science+Business Media
Organization unit: IT
Locality: Dordrecht
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:49:e3:e2:ad:09:3b:e1:91:31:e3:53:e7:d5:f4:4e
Serial Number (int): 15005167690403943983822663866637481038
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:7a:b8:69:a3:f6:37:1b:03:c6:98:c7:8a:6a:52:ab:57:20:ae:85
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 2a:c6:bf:a6:f7:8b:1d:e5:8b:50:08:46:4b:55:2a:14:60:96:68:8d
Fingerprint (sha256): 03:e6:c1:ba:6b:3f:d7:d6:59:97:a0:17:6b:da:0a:30:ae:2c:db:eb:14:39:7d:72:a6:2c:9c:82:bf:41:de:8e

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.springer.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.springer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.springer.com
springer.com

Other certificates including the domain name springer.com

(limited to 100 certificates)
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
www.3scale.net
springer2.map.fastly.net
adwizard.springer.com
springer2.map.fastly.net
fdus-51.freshdesk.com
lehrbuch-psychologie.springer.com
www.3scale.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1e.map.fastly.net
*.springer.com
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
*.springer.com
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
www.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
oda.springer.com
springer2.map.fastly.net
oda.springer.com
support13.cdnetworks.net
springer2.map.fastly.net
*.springer.com
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
fdus-51.freshdesk.com
*.springer.com
dns-vetting2.map.fastly.net
mailings.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
ict.kolibrie.nl
akamai-cn.springer.com
i.ssl.fastly.net
www.3scale.net
i.ssl.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
ftps.springer.com
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
akamai-cn.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer.com
www.springer.com
*.springer.com
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
ict.kolibrie.nl
springer2.map.fastly.net
support13.cdnetworks.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
support13.cdnetworks.net
www.springer.com
*.springer.com

Certificate

The complete raw certificate details for *.springer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQxHlsS3mD1KXGAevqPG
PMTArlvD1d2mMDVsUeyl+vdlkfD6j4zidypxdhNc7mebqLfXq8VJbz2/nUaNS886
I5qPNgVhG9f3muSTiKQEhCk2IASNT5yTmncE+QgK5V3c7rIhv7HZlgJXfskpn4ng
sEGs44hx3q2qzVml1Qzd+47ORAn6xCAD2kTde7OuM/CV4o9SmL19qWsF8Z1UliS5
EwVNQeqbsDWQT8A4GNpZDLYzzrf8o1R5F/2xCZzGtOOiXWdLUi8zCcPCKeITYMxC
hV83wyPLHGkFZ3vAqb8kP5tQ1hfGBkTpy3CugPd8Q5Qc0HyoI9BYz+sl9nLuh39v
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15005167690403943983822663866637481038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-13 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dordrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Springer Science+Business Media'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.springer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22855188517142595965938991808787899367530801656059208232548152995814104655918954724750000056017084001874121166589390128135084159833500496213697589752687410571821235783446062497341686803051056843169326402059390417873615664162626756115488455061355280978399345866491825494668069015528246727314718965710558314139495795750306818496487753139685588665361016146202423053269894504342038132593102267150575956884756751226099251015739486987666154770439337385662844992510807229316049003162163690000619897839923584830912778882956159072590908822922110769102381446969735240385652750895574720140630232622125903338716554010574880468883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b57ab869a3f6371b03c698c78a6a52ab5720ae85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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