*.test.dnrec.delaware.gov

- State of Delaware -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6a:08:df:5f:e8:98:71:5c:af:6e:e4:71:d1:37:0e:ab was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Delaware

Organization: State of Delaware
State / Province: Delaware
Locality: Dover
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:08:df:5f:e8:98:71:5c:af:6e:e4:71:d1:37:0e:ab
Serial Number (int): 140944236504071228666736194995522834091
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0e:74:87:47:49:13:d1:b4:99:d5:f6:48:d2:c0:f7:a9:64:d0:92:82
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 61:c4:95:f7:3a:3b:1e:38:44:91:a7:82:92:7d:a6:85:1e:47:77:f0
Fingerprint (sha256): 04:95:77:6b:f2:37:67:bc:16:9c:44:67:31:a9:0d:41:ae:87:95:61:ab:e8:c0:b0:21:08:89:d5:17:68:49:f4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.test.dnrec.delaware.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.dnrec.delaware.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.dnrec.delaware.gov
test.dnrec.delaware.gov

Other certificates including the domain name delaware.gov

(limited to 100 certificates)
certLink.delaware.gov
eapps.erp.delaware.gov
ddaproductreg.dda.delaware.gov
GROSSRECEIPTSTAX.DELAWARE.GOV
dewow.dhss.delaware.gov
ws.delaware.gov
lims.dda.delaware.gov
apinursery.nilatst.delaware.gov
thisdayadmin.archives.delaware.gov
publicmeetings.delaware.gov
opencheckbook.delaware.gov
na21-1.cdn.salesforce-communities.com
sdsh-test.dhss.delaware.gov
www.geowp.delaware.gov
cfrs.elections.delaware.gov
arden.delaware.gov
signup.assistselfservice.dhss.delaware.gov
schoolclosings.delaware.gov
bids.delaware.gov
foodprogram.delaware.gov
jurorkent.courts.delaware.gov
medicaid.dhss.delaware.gov
imobiletst.dda.delaware.gov
iso.delaware.gov
fsb-dev.budget.delaware.gov
ssoqa.dti.delaware.gov
imobiletst.dda.delaware.gov
myhealthycommunity.dhss.delaware.gov
msds.dhss.delaware.gov
delecorp.delaware.gov
*.test.dnrec.delaware.gov
egov.delaware.gov
dtisupport.delaware.gov
dewow.dhss.delaware.gov
search3.delaware.gov
www.police.middletown.delaware.gov
eapps.erp.delaware.gov
animalservices.delaware.gov
incapsula.com
search3.delaware.gov
sso.delaware.gov
ssl363635.cloudflaressl.com
limstst.dda.delaware.gov
firstmap.delaware.gov
pvs.dti.delaware.gov
fsb-dev.budget.delaware.gov
newhire.dhss.delaware.gov
dtisupport.state.de.us
incapsula.com
pubsrv.deljis.delaware.gov
demaeoc.dema.delaware.gov
assist-test.dhss.delaware.gov
dtisupport.state.de.us
*.delaware.gov
dateadmin.delaware.gov
devtrends.stateplanning.delaware.gov
na21-1.cdn.salesforce-communities.com
grossreceiptstax.delaware.gov
access.delaware.gov
shop.delaware.gov
eflex.courts.delaware.gov
rp.dti.delaware.gov
delafile.delaware.gov
insapp.delaware.gov
*.delaware.gov
rp.dti.delaware.gov
schoolclosingsadmin.delaware.gov
w9.accounting.delaware.gov
devtrends.stateplanning.delaware.gov
search3.delaware.gov
egov.dnrec.delaware.gov
registertovote.elections.delaware.gov
ecris.erp.delaware.gov
dol.delaware.gov
wap.dnrec.delaware.gov
nursenavigator.dhss.delaware.gov
grossreceiptstax.delaware.gov
rp.dti.delaware.gov
snow.dot.delaware.gov
foodprogram.delaware.gov
www.education.delaware.gov
pubsrv.deljis.delaware.gov
dsbservice.delaware.gov
census.delaware.gov
clf.dti.delaware.gov
esupplierqa.erp.delaware.gov
plus.stateplanning.delaware.gov
customers.childsupport.dhss.delaware.gov
ias-test.dhss.delaware.gov
unclaimedproperty.delaware.gov
education.delaware.gov
unclaimedproperty.delaware.gov
dcisappuat.corp.delaware.gov
delafile.delaware.gov
clf.dti.delaware.gov
ssoqa.dti.delaware.gov
vawa.deljis.delaware.gov
msds.dhss.delaware.gov
arden.delaware.gov
rp.dti.delaware.gov

Certificate

The complete raw certificate details for *.test.dnrec.delaware.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H0wwbfzQwbXEL1MfPo+
451duxKQH+i6DabSWrFFgjCm87nRrvG4DzgNHVOST0gxyCverGGVpPRvt8GaAMER
lL1fBi1TaVQjyCxuZIEcic9hY8Krx2iuE6GB6VK7CrmBDBcg/MBQtlhIN9qhCQiQ
hWf899GLxdWDg/F4zI2EVksaL8p2Zc83L6H32rIgY6SEzvgA0GbZUew1VHqIyPld
JC16rJ99qppTyjVS4EpFzpt8cZTEfUvSXpRCj0rGS4iNJYGj11HmreWvgJWdfgIg
6opKCimxFUcqkC9mLiUAYUBbfX7nswj7JGsl8oHBJJ1Nl7YDwkq2+rPAzlqvMYIE
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140944236504071228666736194995522834091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 13:18:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 13:18:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.dnrec.delaware.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26824254367460988250884158212811440290805035117853421906490194495950196018392777198471971788031962530855853845219398007461971481843556850253746647666523460770002200525342310992276735189924327749438277624121834212316938855342931460610796339889129936326994685098560415994224787817466550142192659422601365329625934784681367252301245912862158543434082641242147366189468214347307230083263267523100106630562831828094307123397311967764713638898633358499040785700550392328881065209041619907090133849748885399258124854675462587069276240524405076659503066443399260486011717311569492480953898428825774435697546316020097839400151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e7487474913d1b499d5f648d2c0f7a964d09282
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dnrec.delaware.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.dnrec.delaware.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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