subscriptions.news.com.au

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:e9:f9:af:60:d9:e1:a2:7e:0c:3e:08:06:b8:08:fd was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=subscriptions.news.com.au

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:e9:f9:af:60:d9:e1:a2:7e:0c:3e:08:06:b8:08:fd
Serial Number (int): 9190237357641822712684479234455374077
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 97:44:0d:19:94:7c:13:bf:e1:4e:da:32:69:8d:9d:12:11:d4:ae:f4
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 73:09:93:43:6e:2e:89:4e:ad:58:f9:19:1e:fb:d6:39:ec:e2:ed:78
Fingerprint (sha256): 09:d3:39:14:82:b0:40:2f:54:46:1a:eb:5d:ee:50:be:0d:1c:c3:db:c9:e0:96:0d:7c:50:9e:fb:0c:75:15:b8

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate subscriptions.news.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscriptions.news.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subscriptions.news.com.au
*.subscriptions.news.com.au

Other certificates including the domain name news.com.au

(limited to 100 certificates)
sit.sopsapi.news.com.au
*.talk.kuraprod.cp1.news.com.au
www.stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
www.stacksocial.com
idpdev3.news.com.au
stacksocial.com
sslcam.newsdev.com.au
nlm.uatproxy.news.com.au
news.com.au
stacksocial.com
sslcam.newsdev.com.au
news.com.au
akamai-san174.exacttarget.com
stacksocial.com
stacksocial.com
stacksocial.com
news.com.au
stacksocial.com
www.stacksocial.com
uat.subscriptions.news.com.au
news.com.au
chrome-dot-gng.news.com.au
news.com.au
news.com.au
api.edtech.news.com.au
www.stacksocial.com
stacksocial.com
traktr.news.com.au
news.com.au
sslcam.newsdev.com.au
subscriptions.news.com.au
support.news.com.au
sit.commerceapi.news.com.au
stacksocial.com
news.com.au
*.dcs.news.com.au
amp.news.com.au
stacksocial.com
news.com.au
subscriptions.news.com.au
stacksocial.com
auth-connect.news.com.au
newsletters.news.com.au
news.com.au
ausbots.fbbot.news.com.au
news.com.au
news.com.au
www.stacksocial.com
stacksocial.com
*.news.com.au
www.stacksocial.com
newsletters.news.com.au
news.com.au
stacksocial.com
*.kurator.kuradev.cp1.news.com.au
stacksocial.com
uat.commerceapi.news.com.au
chrome-dot-gng.news.com.au
stacksocial.com
news.com.au
stacksocial.com
stacksocial.com
news.com.au
newsdev.com.au
newsdev.com.au
uatproxy.news.com.au
amp.news.com.au
gng.news.com.au
news.com.au
markets.news.com.au
sslcam.newsdev.com.au
stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
newsdev.com.au
newsdev.com.au
news.com.au
*.talk.kuradev.cp1.news.com.au
sit.graphql.news.com.au
uatproxy.news.com.au
news.com.au
newsdev.com.au
stacksocial.com
stacksocial.com
chartbeast.news.com.au
metrics.news.com.au
stacksocial.com
sslcam.newsdev.com.au
stacksocial.com
www.stacksocial.com
myprofile.news.com.au
news.com.au
news.com.au
newsletters.news.com.au
weather.news.com.au
news.com.au

Certificate

The complete raw certificate details for subscriptions.news.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIQBun5r2DZ4aJ+DD4IBrgI/TANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDQwNTAwMDAwMFoXDTI1MDUwMzIzNTk1OVowJDEi
MCAGA1UEAxMZc3Vic2NyaXB0aW9ucy5uZXdzLmNvbS5hdTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKHVZowG6OW2Gs/OtuG7Jrokg+L9nv/hbs4x7TYL
AUxuemfWwKFOGaMF/Ny2cTG+iAW0a6mIZxz4EWTDYnCnfbsoJMJ7T01qWLO3RDth
Xl7aAAVDkIMdt5CFZKPgtNCP7KSs23ClYj9mhVMSGt+7E3s/C2Fl0t01yzZkthSC
K2j8+RimzNeSFsFWPXmApW+iDHq4nxQcIh390LxGGuMHemupCw7aNISYWJJFqSkh
jd7OV4RhLyZVTxxXZQ1ZPUScsoj+3JS61jCcyX+hkwFXle99lctlkeBoQTbXfnNY
ulWN+ftFW4jkoiupvlzIF7LA0ItLauhmiSE8VzMjshFxfwUCAwEAAaOCAw8wggML
MB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBSXRA0Z
lHwTv+FO2jJpjZ0SEdSu9DBBBgNVHREEOjA4ghlzdWJzY3JpcHRpb25zLm5ld3Mu
Y29tLmF1ghsqLnN1YnNjcmlwdGlvbnMubmV3cy5jb20uYXUwEwYDVR0gBAwwCjAI
BgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpv
bnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB
hiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG
Kmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNV
HRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgBOdaMnXJoQwzhb
bNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY6s7eETAAAEAwBHMEUCIEc0nsJiXIFK
2n6dBnaKFJnMfCmZPjInltNTIlv7kXLtAiEAk3OHT0Go9zV+kbxnFfHSpXHZhC0j
3lIvLyGL+An2F/MAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAA
AY6s7eFRAAAEAwBHMEUCIGfWLu5r6zhwUSZrfCrCcaZ+dEJppf7MRfiGLyFJ0zfr
AiEA8MfqpsbTSkzM2I7TSgAPz1EHjS+EL4lFG3Sj3GODpf0AdgDm0jFjQHeMwRBB
Btdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY6s7eFfAAAEAwBHMEUCIB6K865LCjuj
5OAdNRsKhqW+VIYMTU9PEKK/1uluPJG1AiEA41wkzH/XYLDK7//DPqHkPVOHfKIR
v8tD8RtSo8nDZYwwDQYJKoZIhvcNAQELBQADggEBAIDeBd/wY0jyS4JvyU1Nx0gJ
AidpUvTLvxaYo+HgO2XEQic4QHlZ78YANnCG8UUFisuV9MxADAInZ9yV6VozCSgb
/jZC4X+B5S4OLxV+SMiliTQL15FM99lmGN27owwDi11W0tQGGlWC77LtpwGbL8lz
j5ZMGlAFvN7tUbOfiUWn90vMAzopps5qFzzkWOrE4BnKj2ZLJUE/8YWRyjepI76U
oiTmqTRt9fhi7FK/AQKiD2FxkPmmPNslx5r5ZRZS294XmrjkBmZ/IMLZ2zA8I1un
o1F3Or3QBOX5VHiIObiK9fK2KkSEiTAL2UrjFs7Iruypkq5BTr8cC6Td099YuBE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodVmjAbo5bYaz8624bsm
uiSD4v2e/+FuzjHtNgsBTG56Z9bAoU4ZowX83LZxMb6IBbRrqYhnHPgRZMNicKd9
uygkwntPTWpYs7dEO2FeXtoABUOQgx23kIVko+C00I/spKzbcKViP2aFUxIa37sT
ez8LYWXS3TXLNmS2FIIraPz5GKbM15IWwVY9eYClb6IMerifFBwiHf3QvEYa4wd6
a6kLDto0hJhYkkWpKSGN3s5XhGEvJlVPHFdlDVk9RJyyiP7clLrWMJzJf6GTAVeV
732Vy2WR4GhBNtd+c1i6VY35+0VbiOSiK6m+XMgXssDQi0tq6GaJITxXMyOyEXF/
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9190237357641822712684479234455374077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscriptions.news.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20429598844685869747761409125525288650299969682746565586095082255943747183514843413893623295491051468968750915070283710864095243995013315356786212753599026654928410198463683184650372604170957582560356810710775589847395468362900032427924456647740337138937822208968038482844834066909540124656029951522129354553335095957672246587699230679507742228357302264370085787671463755751861868144943081064942915267279118706838899169640284447786237435143940929037032192346286361734433060062171646170917200572186562313518620119868466339120516287950990876362853907111573223874803911521884451052203666463949126471438133863522281553669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97440d19947c13bfe14eda32698d9d1211d4aef4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriptions.news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subscriptions.news.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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