track.risk.lexisnexis.com

- RELX Inc. -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 06:df:5f:5d:94:61:f4:91:bb:93:3c:33:62:ff:fa:a7:a4:af:fb was issued on by Trustwave Holdings, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RELX Inc.

Organization: RELX Inc.
State / Province: New York
Locality: New York
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:df:5f:5d:94:61:f4:91:bb:93:3c:33:62:ff:fa:a7:a4:af:fb
Serial Number (int): 153262962167474076571069672162126918421098491
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 9f:3f:7d:7d:26:5b:cc:9c:39:02:5b:0d:ab:40:70:20:e1:4f:ea:98
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): fb:f8:8b:19:5a:26:83:c1:91:31:1c:19:e2:ce:8b:23:e9:82:c7:68
Fingerprint (sha256): 06:c1:95:d8:84:e8:5f:32:99:a5:7d:32:63:5b:e6:79:a4:36:f3:5a:d7:b3:8a:2b:14:f1:e1:06:3e:1e:ab:2b

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate track.risk.lexisnexis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for track.risk.lexisnexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

track.risk.lexisnexis.com
risk.lexisnexis.com

Other certificates including the domain name lexisnexis.com

(limited to 100 certificates)
dev-clientshare.lexisnexis.com
insurancesolutions.lexisnexis.com
mfa.lexisnexis.com
personalreports.lexisnexis.com
*.product-aws-prod.nl.lexis.com
collectionsolutions.lexisnexis.com
cdn.insurancesolutions.lexisnexis.com
isit.lexisnexis.com
healthcareportal.lexisnexisrisk.com
dmvpre.alirts.lexisnexis.com
staging.identitymanagement.lexisnexis.com
apply.insurancelink.lexisnexis.com
sni.cloudflaressl.com
batchwebgateway.lexisnexis.com
uat.progressive.lexisnexis.com
risk.lexisnexis.com
RISK-OUT02.rsi.lexisnexis.com
images.solutions.lexisnexis.com
bender.lexisnexis.com
ukcrm.plcert.lexisnexis.com
bis.lexisnexis.com
idms.lexisnexis.com
docshare.lexisnexis.com
updatesxg.bridgerinsight.lexisnexis.com
gma.lexisnexis.com
equifaxconsumers.lexisnexis.com
mfaweb.lexisnexis.com
orders.paymentsolutions.lexisnexis.com
eo.lexisnexis.com
*.business.aws.lexis.com
san-005.ceros.com
risk.lexisnexis.com
demo.avcccert.lexisnexis.com
cdnfp.accurint.com
sni.cloudflaressl.com
test.telematics.lexisnexis.com
*.lexisnexis.com
*.content.aws.lexis.com
midex.lexisnexis.com
jprc.lexisnexis.com
espsso-sign-prd.risk.lexisnexis.com
Bridgerstaging.lexisnexis.com
pm.lexisnexis.com
BridgerDirect.LexisNexis.com
starsdocshare.risk.lexisnexis.com
sf.insurview.lexisnexis.com
*.content.aws.lexis.com
dev.mobiledataprefill.lexisnexis.com
invoice.risk.lexisnexis.com
reporting-stg.identitymanagement.lexisnexis.com
link2.lexisnexis.com
professional.lexisnexis.com
*.midex.lexisnexis.com
recordsretrieval.lexisnexis.com
pas.campaignview.lexisnexis.com
solutions.risk.lexisnexis.com
optout.lexisnexis.com
global.lexisnexis.com
siris.lexisnexis.com
jiradev.rsi.lexisnexis.com
uw.insurancesolutions.lexisnexis.com
gma.lexisnexis.com
induservpn.risk.lexisnexis.com
wcoresearchtraining.risk.lexisnexis.com
WcoEditorialSearchQA.risk.lexisnexis.com
api-caseanalyser.lexisnexis.com
nac.lexisnexis.com
san-005.ceros.com
trial.mapview.lexisnexis.com
r3.lexisnexis.com
forms.consumer.risk.lexisnexis.com
erie.lexisnexis.com
cdnfp.accurint.com
bis.lexisnexis.com
apply.insurancelink.lexisnexis.com
track.risk.lexisnexis.com
*.lexisai.aws.lexis.com
*.issdev.lexisnexis.com
san-005.ceros.com
lexismarkettracker.lexisnexis.com
*.lexisnexis.com
gewpasp.iss.lexisnexis.com
altauth.courtlink.lexisnexis.com
healthcareportal.lexisnexis.com
paymentsolutions.lexisnexis.com
healthcareportaluat.lexisnexis.com
Bridgerstaging.lexisnexis.com
*.lexisnexis.com
sat.lexisnexis.com
social.lexisnexis.com
salesportal.lexisnexis.com
wcoaudit.risk.lexisnexis.com
riskauth.lexisnexis.com
risk.lexisnexis.com
transfer.lexisnexis.com
ride.lexisnexis.com
marketplace.lexisnexis.com
mapview.lexisnexis.com
*.b2b.lexisnexis.com
insurancesolutions.lexisnexis.com

Certificate

The complete raw certificate details for track.risk.lexisnexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvefwSaWVf3wRS9+/CLM7
pQxJUGzL9IutX408q6cXZvQroSRVWt4eVrV85opkf8ZIDgJTKeg9zY5hAPOJxY3J
xGQTQkJ33Xl60cq+w4aPathvSXXwSLARx/+ydigryWT5nr98cGPhjZTJz3T/lJrk
LBwyQFUGScRosc+kbMfAOaDyh9/mvPM3AX1eW15Y4N1MHf0e02fqWKDsg50UUKGn
PiSPlFyp62RL9digwLt/5m3MLTY6g1ATMISLitLP6Hixc22yf6X6iHCEvJjPdS6O
cW+B//gE0KmDo3HHms6Rg4p9JJbFGdJ7oHtQ0Cm2xMUJc+13PfbKGCmpEpliufjg
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153262962167474076571069672162126918421098491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-26 12:27:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 18:27:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'track.risk.lexisnexis.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RELX Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23973412836709185952707963091977745497112596386128605407098606016147024473754679569252142855302735496026806673699058852231978643872580373746853535789636998105147936847926174443555586118666817807510544529673694910654630216150585609906317872915665535201523879833120689845555443973148235815734054122974804990625545295468800671102049460242874964822296482578487114685373435084932027991998231890644078606293430466779587454645807792633184115765754918360324982296963876862564814305865341513640281602628893113237494470915544126288495554836808574392991681110531102392986553109747590642694327393314612643113593515552559225954481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f3f7d7d265bcc9c39025b0dab407020e14fea98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.risk.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risk.lexisnexis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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