*.valmont.com

- Valmont Industries, Inc. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 06:2c:88:d8:f8:f8:91:5e:d5:1f:1b:94:eb:2f:0f:0c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valmont Industries, Inc.

Organization: Valmont Industries, Inc.
Organization unit: Shared Services
State / Province: Nebraska
Locality: Omaha
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:2c:88:d8:f8:f8:91:5e:d5:1f:1b:94:eb:2f:0f:0c
Serial Number (int): 8206604634527009892801748918934114060
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c1:9c:60:77:cc:72:91:b0:c0:2d:31:b8:68:65:e6:f5:8e:40:7f:ab
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 1c:fe:8e:22:2e:15:e7:5d:eb:51:23:be:4f:b2:3f:0b:7f:0d:a4:78
Fingerprint (sha256): 13:42:92:4f:6f:64:b8:cb:1d:d7:fa:12:2b:c9:a4:a2:f7:bf:34:ab:4b:01:d7:0e:20:82:59:32:f3:51:05:58

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate *.valmont.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.valmont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.valmont.com

Other certificates including the domain name valmont.com

(limited to 100 certificates)
fsoma.valmont.com
securemail.valmont.com
valmont.com
valmontux.valmonttest.com
weblync-na.valmont.com
ps.valmont.com
stage.valmont.com
vendortest.valmont.com
vendortest.valmont.com
web.valmont.com
valmont.com
valmont.com
emeavpn.valmont.com
web.valmont.com
webs4b-na.valmont.com
fs.valmont.com
*.valmont.com
vo.valmont.com
fs.valmont.com
securemail.valmont.com
webmail.valmont.com
apacvpn.valmont.com
usomadccppmpub1.valmont.com
valmont.com
VALDC1-W7210.valmont.com
VALDC2-W7210.valmont.com
ocs.valmont.com
guestwifi.valmont.com
webmail.valmont.com
valmont.com
v2o.valmont.com
webmail.valmont.com
valmontux.valmonttest.com
webs4b-na.valmont.com
usomadcvpn.valmont.com
web.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
ocs.valmont.com
web.valmont.com
webmail.valmont.com
valleytest.valmont.com
v2otest.valmont.com
CHM01-W7030.valmont.com
APACVALLEYTEST.VALMONT.COM
webs4b-na.valmont.com
mdevbasestation.valmont.com
*.valmont.com
valmontvpn2.valmont.com
vdm.valmont.com
vdm.valmont.com
v2o.valmont.com
valmont.com
valmont.com
vdm.valmont.com
UTLWEB.VALMONT.COM
fs.valmont.com
webs4b-na.valmont.com
ps.valmont.com
usomadccppmpub1.valmont.com
valleytest.valmont.com
web.valmont.com
cwa.valmont.com
vo.valmont.com
ocs.valmont.com
valucbe01.valmont.com
*.valmont.com
v2o.valmont.com
s4baccess-na.valmont.com
vo.valmont.com
cwa.valmont.com
pstesttmp.valmont.com
mdevbasestation.valmont.com
testcpqapi.valmont.com
CHM02-W7030.valmont.com
fsoma.valmont.com
mobility.valmont.com
v2otest.valmont.com
USOMADCOSAS.na.valmont.com
mysite.valmont.com
profpntmgr.valmont.com
emeavpn.valmont.com
webmail.valmont.com
tsg.valmont.com
fs.valmont.com
valmont.com
v2otest.valmont.com
s4baccess-na.valmont.com
valmontvpn2.valmont.com
apacvalley.valmont.com
emeavpn.valmont.com
pstesttmp.valmont.com
webmail.valmont.com
vdm.valmont.com
CHM02-W7030.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
mysite.valmont.com
v2o.valmont.com
webmail.valmont.com

Certificate

The complete raw certificate details for *.valmont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyezqUcFTio4Ik5Rls5l
DysGqdEyAx45lw10vudEcGoLiJBqB05ZAICZ9wulgUIAh5oP/IENOmr+sDPgpHFz
vhfOJL/QsFgaSBtPqJdT6z9lBVLUvFTSPHHtMQZwzalSC0zkaq0cpR0m33Er3eFi
6xJgmOR2Xd+JrZSTF1lNYDZCCDY9hRxAJdOuJUsVCN9/6ZBzbHFNAIqJcFZqAA4l
b42nBye3PAdXYErPbHJrCI5dplmQo/0H0fY4XiAx5YKzYUZOZAjnqzFzgdVXKZz1
GTgWCzY6AkGmSnHMjDhgrLAfdjHodNDm1fzzH78rofCVL2EcAkGL/rbsCeOMU+c2
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8206604634527009892801748918934114060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nebraska'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Omaha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valmont Industries, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shared Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.valmont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25141000376343494296260047587330394003519846420322651184668146798369511996715975317880610883826661818353445914249652120349236366877742335182166736834312768741600423165355420978044471553638913169049184544422732387087356287912587094385771379423331846553221191422924665344338278857722803692599532247406462267109299198067434720924366632843401121566789993299639690874994173782237274371373673918237629838471114661219462449224030127901509635854620721371365113963733626411201170442038717972424636866914309325033394914356468282947742637929105355273183982587435853227184956931425612729292111390409150161948384811525095782037139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c19c6077cc7291b0c02d31b86865e6f58e407fab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valmont.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001612bc38e990000040300473045022100d0375fa75df751bc162e8c6080b745dfc6f038450696f3f72dda92fd6c797e4702202d02a241a5ef9005e084e7a7d35fd06d4295cea4da543be96eec23db1780ebe60076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001612bc38f3c000004030047304502202219e6f76a98d8c61014e8afc70fa823cdbde33e99cd2ff746569a147fd870520221008ef798ef670ff3408c0c4e792d3ed4418371e82a7e045fe8edf6a573e3b2db03007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001612bc38ebc0000040300473045022100c81236e38d4599a9a20047a93d78d31f75a2b8a49906dfba394f77cd38fa82a702200cc3a4005ed22d88c95f5da857809c03b17226a7ae753d8a38ebde3e771cdfcd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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