*.overtureshops.com

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 01:96:fd:b8:47:e3:a3:08:03:be:69:4c:bd:8a:3d:ed was issued on by DigiCert Inc.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.overtureshops.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:96:fd:b8:47:e3:a3:08:03:be:69:4c:bd:8a:3d:ed
Serial Number (int): 2113218574425398266387207226296778221
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 26:d7:64:9b:79:49:b5:e5:71:08:a1:79:e2:fa:14:d9:b5:d0:2b:4e
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 45:70:53:95:83:b5:29:f5:e3:b6:75:ef:1e:2a:33:dc:94:e7:2e:d2
Fingerprint (sha256): 04:a6:f0:d0:d2:65:26:08:92:2f:89:d1:7d:d2:8e:03:a9:9b:53:b6:cc:b5:62:11:c6:d3:0b:fb:f3:bf:a2:42

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.overtureshops.com

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.overtureshops.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.overtureshops.com
thefrontierstore.com
www.thefrontierstore.com
wowmarketplace.wowinc.com
sso.thefrontierstore.com
mywackerneuson.com
www.mywackerneuson.com
shop.sunnyd.com
shop.funfetti.com
shopdevrystore.com
www.shopdevrystore.com
shop.delivery.com
na.osf.store
*.doordashstore.com
*.doordashstore.ca
*.doordashaustraliastore.com
overtureshops.com
doordashstore.com
doordashstore.ca
doordashaustraliastore.com
invoices.bluesodapromo.com
*.tiktokswagshop.com
tiktokswagshop.com
arcoswag.com
amspeccustom.com
www.amspeccustom.com
www.arcoswag.com
ca-popup.byte-mall.com
us-popup.byte-mall.com
popup.byte-mall.com
spectrummerch.charter.com
doordashnzstore.com
*.doordashnzstore.com
mypotatogear.lambweston.com

Other certificates including the domain name overtureshops.com

(limited to 100 certificates)
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com

Certificate

The complete raw certificate details for *.overtureshops.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVKP40e9yJ+la2qu/6Ht
iJRfN6PVqs6b6p/HKOn9Mn+U4JcVRTDEZ6mwGiAh9nkpbSi/l1Wk5vzMXQ2zga7P
C4QIvrnoodAx8KU+uPG97TDfeRFqua06ctjFNdLVeaTgh1cYTpFju1HQs/JU2PW6
KSftrXyT1nbgzV2KzybVpM7a6VX/Vzv5jZ17ZBCWpbmDrrqyBubnWE2LMEazAi6g
42klUirOM7c+XNFN+EbvYMOnsxI4/8ExM55i3gEfVgc+dGxUvWonX7UcDM9+GzyJ
xzEvGwdJug7bIRkot4SwxUA88JHXDYX8AZJFxhP8awJQ+ZsreRUiBGP05M4CtgLF
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2113218574425398266387207226296778221
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.overtureshops.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23394799288769687546840958818854402366344909300971723499422457566738112995327649183398923461220940855706796792364621207874514387555145216597697793421834896500718470319148254574439484145555866013288286269194439234821533239870473317841003067041012358396804021666527436343071525552701127352959561486416120506701422476536684389214311392322279866911257176950498069777723214595848456090821513649312903992392599226459712779754797047248099016581716459160256581493903010925720376533256702836970337143840044977899383436537474681962402746792888981932269102231559913379091974190203155216855546878079198699853732462347772624029039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26d7649b7949b5e57108a179e2fa14d9b5d02b4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (749 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overtureshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowmarketplace.wowinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywackerneuson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mywackerneuson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sunnyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.funfetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdevrystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopdevrystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.delivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.osf.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashstore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashaustraliastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overtureshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashstore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashaustraliastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoices.bluesodapromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiktokswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktokswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcoswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amspeccustom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amspeccustom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcoswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-popup.byte-mall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-popup.byte-mall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popup.byte-mall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrummerch.charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashnzstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashnzstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypotatogear.lambweston.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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