open.bancopostaclick.poste.it

- Poste Italiane S.p.A. -

Issued by Postecom CS3

About this certificate

This digital certificate with serial number dc:e1:0a:41:12:60:2d:09:3a:ae:86:88:f2:f9:8b:fe:cf:f9:e4:a1 was issued on by Postecom S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • KeyUsage [DataEncipherment DigitalSignature KeyAgreement KeyEncipherment] (00011101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • The DER encoded certificate serial number is 21 octets long. If this is surprising to you, note that DER integers are signed and that SNs that are 20 octets long with an MSB of 1 will be automatically prefixed with 0x00, thus bumping it up to 21 octets long. SN: 00DCE10A4112602D093AAE8688F2F98BFECFF9E4A1 Certificates must not have a DER encoded serial number longer than 20 octets (RFC 5280: 4.1.2.2)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Poste Italiane S.p.A.

Organization: Poste Italiane S.p.A.
Organization unit: Postecom S.p.A.
Country: IT

Postecom S.p.A.

Organization: Postecom S.p.A.
Organization unit: Servizi di Certificazione
State / Province: IT
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): dc:e1:0a:41:12:60:2d:09:3a:ae:86:88:f2:f9:8b:fe:cf:f9:e4:a1
Serial Number (int): 1260996530516552730863798356189026717420373009569
Serial Number lenght: 160 bits, 20 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 67:98:70:5a:c3:85:f0:49:86:f5:22:4c:27:6c:7c:be:93:bd:00:ee
Fingerprint (sha256): 09:7e:6e:42:fc:9d:a0:82:f9:34:2f:da:7b:a4:d0:a3:b0:f1:00:23:89:8b:c7:12:5f:96:ca:cd:f4:2e:a5:ee


Revocation information

CRL Distribution Point: http://postecert.poste.it/postecomcs3/crl.crl

Check the revocation status for certificate open.bancopostaclick.poste.it

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for open.bancopostaclick.poste.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name poste.it

(limited to 100 certificates)
bacheca.poste.it
lemiecarte.poste.it
noidiposte.poste.it
spidposte.test.poste.it
bancopostaclick.poste.it
bolgette.poste.it
seguimi-imprese.poste.it
erecruiting.poste.it
pcommerce.sv.poste.it
proxywscorrieritest-api.poste.it
riscocomuni.fiscalitalocale.poste.it
postepay.poste.it
acquistionlinetest.poste.it
seguimi-privati.poste.it
erecruiting.poste.it
energycvm-fe.cert.poste.it
prestitofindomestic.poste.it
sicinf.poste.it
open.bancopostaclick.poste.it
viviwelfare.poste.it
postecards.poste.it
ipzs.poste.it
sslcertificate1.queue-it.net
ep-svc-ws-deviceregistration.poste.it
myposteonline.poste.it
pcommerce.sv.poste.it
fondi.test.poste.it
bancopostaclick.poste.it
risparmiopostale.poste.it
certitelcatasto.poste.it
raccomandata-ce.poste.it
upload.poste.it
postedoc.poste.it
www.poste.it
postecert.poste.it
widget.poste.it
postecasa-ultraveloce.poste.it
paccoweb.poste.it
posteagcds.poste.it
infodeliverylight.poste.it
energy-upload.cert.poste.it
noidipostespcoll.poste.it
fea-online.test.poste.it
postedeliveryweb.poste.it
xolClient.cloudapp.poste.it
profilocommercialeimprese.poste.it
crmucampcert-be.poste.it
gestionepec2.poste.it
apppaycodice.mobile.poste.it
piafapp.poste.it
corrispondenza.poste.it
postecert.poste.it
ELOQUATST01.poste.it
myposteonline.poste.it
energy-voltura.poste.it
e-filatelia.poste.it
sonarqube.alm.poste.it
bancopostaonline.poste.it
corrispondenza.poste.it
idp-poste.poste.it
ftps.monitoraggioerendicontazione.poste.it
cartadigitale2e-webview.poste.it
aggiornadati-privati.poste.it
cas-business.poste.it
postecards.poste.it
ep-svc-ws-deviceregistration.poste.it
telegramma-ce.poste.it
postecert.poste.it
francobollofacile.poste.it
noidipostespcoll.poste.it
open.bancopostaclick.poste.it
noidiposteapp.mobile.poste.it
amministrazione-pto.poste.it
jms-vassist-bs.mobile.poste.it
acquistionlinevas.poste.it
comunicazionionline.poste.it
posta-online.poste.it
seguimi-privati.poste.it
aisyn.poste.it
bancopostafondi.poste.it
postepay.poste.it
unep.poste.it
sslcertificate1.queue-it.net
registrazione-pa.poste.it
energyocr-fe.svil.poste.it
registrazioneprivati.poste.it
INFOPAL.POSTE.IT
carrello.poste.it
pec.cloudapp.poste.it
postecards.poste.it
patrimonio.poste.it
feabancoposta.poste.it
ppoefunc02azwe-prod.poste.it
registrazioneprivati.poste.it
business.poste.it
securelogin.bp.poste.it
risparmiopostaleonline.poste.it
ccs-stssvil.poste.it
ttoolobfunct01azne-test.poste.it
fdr.poste.it

Certificate

The complete raw certificate details for open.bancopostaclick.poste.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKyVxH461BGmP9NQY0Ov
pryiDb1BSfLNHG/fPTT8nSVokEOdAiSIXysj2LblSoWa2wtMZiKCX4AWbUgyjnW1
/992gEE5kpQF1rzEROdcPIQ1IvoH6I+WLdMypKq070DBN0tMuzxzvhUGtQhS6ry/
aCuJsxeoywUK+wXkD7G9mc14MvuRy5WzOrawkfj8bMAglgQn/ei+7XdLlqGmS2eD
J7dxcvpnyJ1MgZlCxp1cM4SvtUva6wJAKRSRjMiJG/YabJklw5C2+/TcqczRJ5xT
WpqUmETcoQE5Kt4bzBSmMgBqkmGe+tjIuYhWJ882KoqvCEFLv3latf6DT3lv+sCW
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1260996530516552730863798356189026717420373009569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Postecom S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Servizi di Certificazione'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Postecom CS3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-24 16:33:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-24 16:33:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Poste Italiane S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Postecom S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'open.bancopostaclick.poste.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21293140084243787039382925019588307825434837707625974154758295342609291426197893340530179716153296829162895985254442153734571748632645357143462973456740014786917536849298238656038252147769139939858667445157204082115892744185003849620337611394487452276864747341787583749533604893938563850255265936131375441775753659552854126407457292776625887631386069632533609636930465775760553521216515467374682571940102993862366025211607261143019215980087614252144449743999230410191985558920480103445966576649320105000441819499286106368407737017294565964319065108508509681038455617144794077871496495056081030214893468350338205521467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.76.11.1.1.4.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://postecert.poste.it/manualioperativi/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CyberTrust'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore CyberTrust Root'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String ''Rb'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postecert.poste.it/postecomcs3/crl.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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