projectweb.niche.tohoku.ac.jp

- Tohoku University -

Issued by NII Open Domain CA - G7 RSA

About this certificate

This digital certificate with serial number 33:72:2d:4f:da:eb:42:24:41:7b:17:22:83:84:ec:43 was issued on by SECOM Trust Systems CO.,LTD..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tohoku University

Organization: Tohoku University
State / Province: Miyagi
Locality: Sendai-shi
Country: JP

SECOM Trust Systems CO.,LTD.

Organization: SECOM Trust Systems CO.,LTD.
Country: JP

This certificate will expire on

Certificate Details

Serial Number (hex): 33:72:2d:4f:da:eb:42:24:41:7b:17:22:83:84:ec:43
Serial Number (int): 68383468662112824873450093531898375235
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 96:c4:8b:4b:b9:b3:ca:38:43:87:39:86:0b:26:61:f4:7b:4a:89:67
AuthorityKeyId: b0:2e:e5:51:ed:fc:4a:cf:a3:87:f1:13:90:76:2d:9d:8e:94:a1:e3

Fingerprint (sha1): 87:2f:15:38:43:54:01:62:58:f5:8e:38:07:76:83:5a:54:cb:56:b1
Fingerprint (sha256): 05:b9:b7:87:00:ca:de:cb:49:ac:41:f6:23:d6:8e:08:5d:61:bc:1a:1d:4c:6d:bf:d2:c1:66:48:f5:21:93:18

Issuing Certificate URL: http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer

Revocation information

OCSP Server: http://niig7rsa.ocsp.secom-cert.jp
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl

Check the revocation status for certificate projectweb.niche.tohoku.ac.jp

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for projectweb.niche.tohoku.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

projectweb.niche.tohoku.ac.jp
www.fri.niche.tohoku.ac.jp
behavneuro.niche.tohoku.ac.jp
tribology.niche.tohoku.ac.jp

Other certificates including the domain name tohoku.ac.jp

(limited to 100 certificates)
exam.med.tohoku.ac.jp
www.idac.tohoku.ac.jp
*.sc.imr.tohoku.ac.jp
www.nme.mech.tohoku.ac.jp
www.diverta.co.jp
iport.material.tohoku.ac.jp
shimoji.sb.ecei.tohoku.ac.jp
rp.db.tains.tohoku.ac.jp
mail.fris.tohoku.ac.jp
pmail.riec.tohoku.ac.jp
takuhon.lab.irides.tohoku.ac.jp
aem-www.imr.tohoku.ac.jp
caslc.sb.ecei.tohoku.ac.jp
aomobi.niche.tohoku.ac.jp
www.astr.tohoku.ac.jp
emc.tohoku.ac.jp
thistle.cite.tohoku.ac.jp
www.diverta.co.jp
www.diverta.co.jp
defiant.ei.tohoku.ac.jp
applicant.insc.tohoku.ac.jp
smartcampus.ecei.tohoku.ac.jp
www.sc.isc.tohoku.ac.jp
esns.econ.tohoku.ac.jp
www3.tains.tohoku.ac.jp
dragon.ei.tohoku.ac.jp
www.econ.tohoku.ac.jp
applicant.eng.tohoku.ac.jp
takuhon.lab.irides.tohoku.ac.jp
c.bureau.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www.hpc.cc.tohoku.ac.jp
rcc.niche.tohoku.ac.jp
work.bureau.tohoku.ac.jp
www.diverta.co.jp
web.med.tohoku.ac.jp
banana.cite.tohoku.ac.jp
edge-next.eng.tohoku.ac.jp
www.math.tohoku.ac.jp
www.niche.tohoku.ac.jp
research.wpi-aimr.tohoku.ac.jp
dav.mobility.niche.tohoku.ac.jp
*.springer.com
www.cite.tohoku.ac.jp
netacademy-md.cite.tohoku.ac.jp
radius1.tains.tohoku.ac.jp
projectweb.niche.tohoku.ac.jp
mail1.niche.tohoku.ac.jp
www.ige.tohoku.ac.jp
www.library.tohoku.ac.jp
geoserv.kankyo.tohoku.ac.jp
argon.material.tohoku.ac.jp
water-infra.niche.tohoku.ac.jp
www.diverta.co.jp
emc.tohoku.ac.jp
biobank-search.megabank.tohoku.ac.jp
xev.arch.is.tohoku.ac.jp
emc.tohoku.ac.jp
apps.niche.tohoku.ac.jp
hq.eng.tohoku.ac.jp
comp.chem.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www.hpc.cc.tohoku.ac.jp
www2.cal.is.tohoku.ac.jp
nwsvc-am1.svm.megabank.tohoku.ac.jp
secure.niche.tohoku.ac.jp
seaotter.cite.tohoku.ac.jp
www11.bureau.tohoku.ac.jp
pj-web.niche.tohoku.ac.jp
crr.is.tohoku.ac.jp
mail.apph.tohoku.ac.jp
www.phys.tohoku.ac.jp
tupms.rpip.tohoku.ac.jp
imr-kyodo.imr.tohoku.ac.jp
www.cal.is.tohoku.ac.jp
login.sic.med.tohoku.ac.jp
hayate.law.tohoku.ac.jp
www.cyric.tohoku.ac.jp
pgate.niche.tohoku.ac.jp
openvpn.tohoku.ac.jp
sub.web.tohoku.ac.jp
rs.eng.tohoku.ac.jp
auth.tohoku.ac.jp
zabbix.niche.tohoku.ac.jp
www.tfc.tohoku.ac.jp
emc.tohoku.ac.jp
smtp.med.tohoku.ac.jp
www2.ei.tohoku.ac.jp
webwork.math.is.tohoku.ac.jp
aem.imr.tohoku.ac.jp
tarte.sc.cc.tohoku.ac.jp
www.sed.tohoku.ac.jp
m.ec.ecei.tohoku.ac.jp
reserve.material.tohoku.ac.jp
www.cl.ecei.tohoku.ac.jp
kjwebserver.bureau.tohoku.ac.jp
eifs.ec.ecei.tohoku.ac.jp
www.civil.tohoku.ac.jp
www2.ei.tohoku.ac.jp
vpn3.tohoku.ac.jp

Certificate

The complete raw certificate details for projectweb.niche.tohoku.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuomgDPWFRA7f0BGFtd0y
Dh1hgq7UXEqhnw4DqeN7ytN3ORdVRDcW6or4bwhUS7uUKNsHVtLGNfg882zP0lGn
4kHySOMgxNZfMI+4k1iW66o72eaCsv2TBBSsCPQMSthJM9ewHlsiW2KxFxiPjUJL
AQT5MXP0+qhr0la/7xXBUv+JjryYF0p+PKD46v0U1R44xIsry6rBWWsTsBQ2OlGN
fWVaQpu52IuWGHYyibX6yKGWC8SvctLni+ANGJA3h0MeGnw3JZD8AgpDXwoeiad+
0ltYGB6NDPtbs/hmtEasPpIwAL0xmHU+ROB8fEXLzuX19luru0TaykJEA5iyf/sj
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68383468662112824873450093531898375235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SECOM Trust Systems CO.,LTD.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G7 RSA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 02:13:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-07 02:13:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Miyagi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sendai-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tohoku University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'projectweb.niche.tohoku.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23548190238074677869936732762783283847486972782469425651692123990231292408253445066068569565677155988970080334498624095130070256240350315473279335221694454154893794470318367135934593431147160382159110475376928653704088764187009972153047158164081358572940832032656543365881021350228382052529174798318971037018463563506127470502950297146028953571968667232390004536556646459965105319629952238454095617369154660232501559109158929197166541986776377256653094777630752204587640630898149992732850832009759188763038282681293620412979370852628288216623692895752098817598250775629568765867585788071961143694126962572595612558329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b02ee551edfc4acfa387f11390762d9d8e94a1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/nii-odca4g7rsa.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig7rsa.ocsp.secom-cert.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectweb.niche.tohoku.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fri.niche.tohoku.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behavneuro.niche.tohoku.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribology.niche.tohoku.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200091.110.214.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca4/fullcrlg7rsa.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96c48b4bb9b3ca38438739860b2661f47b4a8967
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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