reply.information.hsbc.co.uk

- HSBC Group Management Services Limited -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:33:f1:ca:c4:96:e0:8c:24:cf:ec:6f:9b:2b:f6:d2 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HSBC Group Management Services Limited

Organization: HSBC Group Management Services Limited
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:33:f1:ca:c4:96:e0:8c:24:cf:ec:6f:9b:2b:f6:d2
Serial Number (int): 8245079240139540573661022493671683794
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4e:34:93:c4:b1:f4:f3:5e:f3:7a:6e:32:3d:cd:d4:a1:ac:eb:3c:bd
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 02:ff:cb:23:0d:a2:12:52:e5:96:25:11:6a:a6:37:66:ae:91:d5:e7
Fingerprint (sha256): 05:52:a7:b1:24:10:ab:47:e7:49:b3:bf:f8:d1:cb:c0:3c:f9:d7:35:f6:c3:f6:8b:fc:37:af:36:7e:e9:2f:c4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate reply.information.hsbc.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reply.information.hsbc.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reply.information.hsbc.co.uk

Other certificates including the domain name hsbc.co.uk

(limited to 100 certificates)
servicing.hsbc.co.uk
sy-evrgrn-uae.lp.hsbc.co.uk
www.cmbinsightservice.business.hsbc.co.uk
wdc-evrgrn-uae.lp.hsbc.co.uk
creditcard-msb-devstubbed.hsbc.co.uk
www.security.hsbc.co.uk
www.hsbc.co.uk
www.sg-gws.hsbc.co.uk
wdc-dtest-ukpib.gsslp.hsbc.co.uk
view.mail01.hsbc.co.uk
futurefocus.staff.hsbc.co.uk
anycremoteaccess.hsbc.co.uk
www.business.hsbc.co.uk
wdc-dtest-ukpib.lp.hsbc.co.uk
dco-loans-uat.lp.hsbc.co.uk
sy-fdib.gsslp.hsbc.co.uk
wdc-evrgrn-ms.lp.hsbc.co.uk
saas.hsbc.co.uk
portal.intermediaries.hsbc.co.uk
GBV00990.gsslp.hsbc.co.uk
www.m.services.online-banking.hsbc.co.uk
online-banking.business.hsbc.co.uk
online.email.hsbc.co.uk
maint-wdc.servicing.hsbc.co.uk
oam.hsbc.co.uk
www.business.hsbc.co.uk
wdc-evrgrn-ukpib.lp.hsbc.co.uk
live.hsbc.co.uk
wdc-dtest-evrgrn-ms.lp.hsbc.co.uk
www.security.hsbc.co.uk
online-banking-test.business.hsbc.co.uk
sygdc.exconnect.hsbc.co.uk
api-sy.hsbc.co.uk
wdc-ukpib-gplfx.lp.hsbc.co.uk
sy-hssidi.lp.hsbc.co.uk
www.assetmanagement.hsbc.com
wdc-ukiif-filedownloadservice.gsslp.hsbc.co.uk
www.wdc.maint.appointmentbooking.hsbc.co.uk
sy-rbp2-ohd.gsslp.hsbc.co.uk
dtest-ukpib.lp.hsbc.co.uk
contactcentre.hsbc.co.uk
sylp.security.hsbc.co.uk
sygdc-hsbcadvance.gsslp.hsbc.co.uk
dco-loans-uat.lp.hsbc.co.uk
lp.online-banking.business.hsbc.co.uk
www.uk-gws.hsbc.co.uk
www.security.hsbc.co.uk
wdc-dtest-evrgrn-ukbib.lp.hsbc.co.uk
sy-prb.gsslp.hsbc.co.uk
creditindication.business.hsbc.co.uk
advancemembers.hsbc.co.uk
services-platform-b1-uat.business.hsbc.co.uk
pdfservice.hsbc.co.uk
www.hsbc.co.uk
sy.lp.appointmentbooking.online-banking.hsbc.co.uk
dco-ao-uat.lp.hsbc.co.uk
UK.Cheque.Client.Prod.2.IPSL.hsbc.co.uk
fatca-hk-link.hsbc.co.uk
www.services.online-banking.hsbc.co.uk
tx.fguk.hsbc.com
www.biciban.hsbc.co.uk
gbv00999.gsslp.hsbc.co.uk
link.hsbc.co.uk
nw-uaeao.gsslp.hsbc.co.uk
www.premier-golf-network.hsbc.co.uk
GBWDC300VG032.mra-emea-uat.hsbc.com
www.uniphitest.hsbc.co.uk
wdc.maint.pbgb.hsbc.co.uk
wdc-evrgrn-ms.lp.hsbc.co.uk
dip-cert.online-mortgages.hsbc.co.uk
wdclp.m.services.online-banking.hsbc.co.uk
globalinvestments.hsbc.co.uk
insurance-online-iipliveproving.hsbc.co.uk
wdc-pk.gsslp.hsbc.co.uk
www2.trading.investdirect.hsbc.co.uk
api-sy.hsbc.co.uk
www.assetmanagement.hsbc.com
staffremoteaccess2.hsbc.co.uk
www.makeaclaim.hsbc.co.uk
www.maint-file-online-banking.hsbc.co.uk
ob-preprod.business.hsbc.co.uk
www.ukdabao-fileservice.hsbc.co.uk
san-12-s10.tlsprovisioning.exacttarget.com
nwndc-hsbcadvance.gsslp.hsbc.co.uk
wdc-pdf.gsslp.hsbc.co.uk
intermediaryupdate.hsbc.co.uk
sy-mortgageswitcher.lp.hsbc.co.uk
link.hsbc.co.uk
wdc-stp.gsslp.hsbc.co.uk
dsp.hsbc.co.uk
ukpib-fileservice.hsbc.co.uk
www.personalisedloanquote.hsbc.co.uk
ukpib-fileservice.hsbc.co.uk
fatca-palestine-link.hsbc.co.uk
sylp.m.services.online-banking.hsbc.co.uk
fatca-bangladesh-link.hsbc.co.uk
www.investments.hsbc.co.uk
uat.market.privatebanking.hsbc.co.uk
www.tmo.hsbc.co.uk
www.askus.hsbc.co.uk

Certificate

The complete raw certificate details for reply.information.hsbc.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8245079240139540573661022493671683794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSBC Group Management Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reply.information.hsbc.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862057100816299560590725649191348667480141741193854732880095733874423662282887457572147743213926157402430741562174823045857076301949226966397016195192317459686116732758477461769400784312578143252030285660046032820486553490275809519112644360865748623827501684151125940223031037338351097801763357058015838230772631121305393039782588168889956451323466089949054414672445950593244527663736517009728833864512901060387850478333770566271462909690582597009777932428273203947364174821149093370720216052557281116238014545730384418801935190103693030923345057675183383157783283221448251044470266280370274289793384594414330535026549737946287732105727923844405846921396468914098691533479717001833386060210823815346663262558066004921840670906763162443905456053414713608662545163244806837950160704989500766213033556160831108036500166381006495138602597903821125676248036922751579769040782196279856968732137284885315042625698957055998926873208983305712059528572888750788869763311516888693853304211204571495048798759745129264160079395528563201982648947786244142561290303001487440845556620572493866123791057968712897095968926355280928035644849474315873721132269240536604139161990797279874503044679951001612494391761323788409834861367998480576324430055959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e3493c4b1f4f35ef37a6e323dcdd4a1aceb3cbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reply.information.hsbc.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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