dc07-s01.dc.tr.mufg.jp

- Mitsubishi UFJ Trust and Banking Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:a7:64:73:b9:ad:18:86:80:30:7d:c0:28:2c:d3:2b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mitsubishi UFJ Trust and Banking Corporation

Organization: Mitsubishi UFJ Trust and Banking Corporation
State / Province: Tokyo
Locality: CHIYODA-KU
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:a7:64:73:b9:ad:18:86:80:30:7d:c0:28:2c:d3:2b
Serial Number (int): 7515290963962936687563330580936184619
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ce:2f:8a:a9:fb:e0:e2:49:3a:38:48:68:2a:78:a4:6e:f2:3a:37:bf
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 6c:27:03:ea:3e:50:ce:06:4a:b4:b6:9e:d4:59:c5:31:40:a6:f1:f2
Fingerprint (sha256): 04:c1:59:27:5b:23:50:d4:ff:7e:90:49:1f:54:5a:5f:f6:62:d7:02:90:05:c9:4d:8f:a1:a7:68:b4:53:a5:9a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate dc07-s01.dc.tr.mufg.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dc07-s01.dc.tr.mufg.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dc07-s01.dc.tr.mufg.jp

Other certificates including the domain name mufg.jp

(limited to 100 certificates)
dente2.bk.mufg.jp
www.br.bk.mufg.jp
san-10-s10.tlsprovisioning.exacttarget.com
gl.ebusiness.bk.mufg.jp
bpf-test.bk.mufg.jp
www2.mx.bk.mufg.jp
e.ebusiness.bk.mufg.jp
mutbreit.tr.mufg.jp
ut0712mproject.sc.mufg.jp
eweb1.cn.bk.mufg.jp
www.keshikomi-w.bk.mufg.jp
eb-mst.bk.mufg.jp
entry31.bk.mufg.jp
www9.cr.mufg.jp
www.mufg.jp
t.au.bk.mufg.jp
remote.ny.tr.mufg.jp
safe.tr.mufg.jp
r.gph.bk.mufg.jp
direct11.bk.mufg.jp
entry11.bk.mufg.jp
k.direct12.bk.mufg.jp
f1biz-stn.bk.mufg.jp
developer.am.mufg.jp
ra.ebusiness.bk.mufg.jp
stg.supportsite.dc.tr.mufg.jp
cms.bizbuddy.mufg.jp
t.direct.s.bk.mufg.jp
webinq.bk.mufg.jp
EXTGWS01.NJMQGWDEVL.us.mufg.jp
online.sc.mufg.jp
TLHVE01.mufgldnvc.uk.mufg.jp
bpf.bk.mufg.jp
direct.s.bk.mufg.jp
gph.bk.mufg.jp
direct.s.bk.mufg.jp
stgauthortemp.corporate.bk.mufg.jp
mxt4.sc.mufg.jp
pension.tr.mufg.jp
www.lifeplan.tr.mufg.jp
appli.bk.mufg.jp
j.bizstn.bk.mufg.jp
mainte.mukam.jp
ut0403pproject.sc.mufg.jp
mobile.sc.mufg.jp
uk2.int.sc.mufg.jp
drcag.hk.sc.mufg.jp
bizstn.bk.mufg.jp
developer.am.mufg.jp
faq10.bk.mufg.jp
rc.e.ebusiness.bk.mufg.jp
web-edi02.muf.bk.mufg.jp
certificate.tr.mufg.jp
*.r2.bk.mufg.jp
fs2.cr.mufg.jp
chohyo-bpo1.bk.mufg.jp
trade-portal.portal.us.bk.mufg.jp
t.tms.bk.mufg.jp
www.uk.am.mufg.jp
mncollecttest.bk.mufg.jp
www.keshikomi-w.bk.mufg.jp
rb.j.ebusiness.bk.mufg.jp
t.entry91.bk.mufg.jp
b.ebusiness.bk.mufg.jp
remote.tu.bk.mufg.jp
smtp2.us.sc.mufg.jp
test.bizbuddy.mufg.jp
s.bk.mufg.jp
direct.s.bk.mufg.jp
j.rmb.bk.mufg.jp
direct11.bk.mufg.jp
htg.btmu-fxportal.bk.mufg.jp
flex-charge.bk.mufg.jp
ebusiness.bk.mufg.jp
san-10-s10.tlsprovisioning.exacttarget.com
debit.cr.mufg.jp
k.entry11.bk.mufg.jp
eweb.bk.mufg.jp
cas.mufg.jp
www.cr.mufg.jp
kryng.comsuite.bk.mufg.jp
cdn-online.sc.mufg.jp
k.direct12.bk.mufg.jp
biz-persons.mufg.jp
kwc.bk.mufg.jp
fx.us.bk.mufg.jp
fx.sg.bk.mufg.jp
btmu-rad.us.mufg.jp
k.entry11.bk.mufg.jp
cms1.br.bk.mufg.jp
EXTGWP01.njmqgwprod.us.mufg.jp
k.entry12.bk.mufg.jp
www.tr.mufg.jp
dokodemo-shounin.bk.mufg.jp
www2.keshikomi-w.bk.mufg.jp
www11.direct.tr.mufg.jp
developer.api.bk.mufg.jp
j.g.bizst.bk.mufg.jp
www.int.tr.mufg.jp
t.webinq.bk.mufg.jp

Certificate

The complete raw certificate details for dc07-s01.dc.tr.mufg.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuZGNqiAHHTH+VHK1XaI
ewPqH87C/yi7hCgOyOAjn7jlJ+sUte0wW7s7sfjZPjzHQOQ5GDdk0Q6mUgOEKncF
NcCJ6IbVNV0KDuBXxHYeSrQuP1Y2Ujdi2RPB+/CJ70dsGA6/K2Gb7C/OnTUMj2EE
oU26NYVzVJCZ6EWOSDB/DsPipq3qlSdTljIamKKMaa/GYsRQ1cWWaQ5Msprej0OB
xGjuYgKNdz42HAAtDh31y49uyD6GHLT4XowLixGXO0mjwC5zajnqaBotHGk1YVBm
ntKqWmPmMXi9pUSjfXDeFdFftEU1dVV6V5V1+L9ZHHTqpgYVITMmi/8FM0AKK08k
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7515290963962936687563330580936184619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHIYODA-KU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mitsubishi UFJ Trust and Banking Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dc07-s01.dc.tr.mufg.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25613690078588093771165877490240290597227925379801800521644805397451448717251099470089037085085373742299038201216570090950855103939792496399459012150413584400356131071143127501259335323349424399765852779686231210132434921787012363351560660788735076343848424517428800726728552434899131624263038308869369693900166065543571322548653075992642495189800050821778718195506859657974623320414413859559475693815555698738797378374863990019813291921019000397613716997084959903941611503838815375646646852468621626760474500456441363074380111040681399015677649397760237933656643301129391755522279768261441910551999419029604719862997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce2f8aa9fbe0e2493a3848682a78a46ef23a37bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc07-s01.dc.tr.mufg.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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