*.crossknowledge.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0a:fc:34:fc:97:83:bb:b3:ef:02:1a:0f:53:90:d0:ad was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.crossknowledge.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:fc:34:fc:97:83:bb:b3:ef:02:1a:0f:53:90:d0:ad
Serial Number (int): 14601813463887770940017338703049445549
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d1:01:12:53:75:f5:0c:33:aa:c4:24:3c:73:88:b6:55:1a:12:9d:1a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 80:48:56:2e:c8:b7:b8:b7:42:53:90:3e:cb:82:38:4c:19:cd:e3:2f
Fingerprint (sha256): 14:b6:ab:da:c3:5b:30:0c:fb:af:d3:91:f7:7a:61:47:0c:e5:f6:fe:29:66:75:31:3a:6a:de:8a:ea:54:e0:72

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.crossknowledge.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.crossknowledge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.crossknowledge.com

Other certificates including the domain name crossknowledge.com

(limited to 100 certificates)
*.k8s.crossknowledge.com
www-test.crossknowledge.com
status.palmerdonavin.com
www-test.crossknowledge.com
*.k8s.crossknowledge.com
trail.crossknowledge.com
healthstatus.clinicmaster.com
systemstatus.rrc.ca
status.dutchmillerauto.com
connect.crossknowledge.com
healthstatus.clinicmaster.com
www.hub.crossknowledge.com
documentation.crossknowledge.com
*.crossknowledge.com
status.cofh.org
track.crossknowledge.com
healthstatus.clinicmaster.com
blog-preprod.crossknowledge.com
learningwire.crossknowledge.com
www.hub.crossknowledge.com
healthstatus.clinicmaster.com
*.moodle-staging.crossknowledge.com
feeds-status.backatyou.com
site-status.motor.com
*.crossknowledge.com
connect.crossknowledge.com
info.crossknowledge.com
*.na.crossknowledge.com
status.rights.tokyo
nextconference.crossknowledge.com
sgp.crossknowledge.com
*.na.crossknowledge.com
status-salus-eu.uleeco.com
documentation.crossknowledge.com
www-preprod.crossknowledge.com
sgp.crossknowledge.com
learningwire.crossknowledge.com
crossknowledge.com
status.crossknowledge.com
*.asia.crossknowledge.com
*.crossknowledge.com
status.palmerdonavin.com
*.crossknowledge.com
status.bairdwarner.com
sigal.crossknowledge.com
nextconference.crossknowledge.com
www-preprod.crossknowledge.com
crossknowledge.com
*.lms.crossknowledge.com
www.crossknowledge.com
www-preprod.crossknowledge.com
*.asia.crossknowledge.com
*.jnstaging.crossknowledge.com
healthstatus.clinicmaster.com
saml.crossknowledge.com
connect.crossknowledge.com
healthstatus.clinicmaster.com
systemstatus.rrc.ca
www-preprod.crossknowledge.com
status.iknowchurch.co.uk
warning-pages.crossknowledge.com
crossknowledge.com
*.sa.crossknowledge.com
learningwire.crossknowledge.com
*.sa.crossknowledge.com
trail.crossknowledge.com
status.bairdwarner.com
www-preprod.crossknowledge.com
*.sa.crossknowledge.com
*.asia.crossknowledge.com
warning-pages.crossknowledge.com
feeds-status.backatyou.com
blog.crossknowledge.com
*.na.crossknowledge.com
systemstatus.rrc.ca
*.lms.crossknowledge.com
crossknowledge.com
uptime-global.crossknowledge.com
sgp.crossknowledge.com
*.moodle-staging.crossknowledge.com
*.staging.na.crossknowledge.com
crossknowledge.com
sgp.crossknowledge.com
wobily.noc.cloudi.cloud
*.lms.crossknowledge.com
*.lms.crossknowledge.com
crossknowledge.com
connect.crossknowledge.com
www.crossknowledge.com
blog.crossknowledge.com
documentation.crossknowledge.com
blog.crossknowledge.com
nextconference.crossknowledge.com
lemtrail.crossknowledge.com
crossknowledge.com
info.crossknowledge.com
crossknowledge.com
www-preprod.crossknowledge.com
go.crossknowledge.com
lemtrail.crossknowledge.com

Certificate

The complete raw certificate details for *.crossknowledge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIQCvw0/JeDu7PvAhoPU5DQrTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMDkwOTAwMDAwMFoXDTI0MTAwNzIzNTk1OVowHzEd
MBsGA1UEAwwUKi5jcm9zc2tub3dsZWRnZS5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDba/yUYFR4UZk3l/ELjIzRk4Thq4eVCDmZuSPLySPtM7nA
slyM7VbeFIgytMXmawVA97rbCXoguKkoxR6GdmrYNMrybzIwkjqvb2DmD7uYYcGO
NO8MuAtJfU3d16+s8JlCjkk4EF9Ohmbivl2rUgU29/b2zzIeVmMDhTEfDyXCN+Vk
hmnLLgWSuBjrY3nAAMklfOqNMkpWJslQHDWSGKeOjPJFjny6XIy6nut3VFxj1hm0
MBx/mu5Vz5od6PUOWyHlQbltwoXXr6qG522cr3rkCEAhhI8u9cPZevsw0Fuekkj+
TpMYHetW9Ui6Jm+AhZ5KkadNwXo7Rp9haazcpiIFAgMBAAGjggLvMIIC6zAfBgNV
HSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQU0QESU3X1DDOq
xCQ8c4i2VRoSnRowHwYDVR0RBBgwFoIUKi5jcm9zc2tub3dsZWRnZS5jb20wEwYD
VR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMCBggrBgEFBQcDATA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy
bTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0G
CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYI
KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAz
LmNlcjAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgDu
zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYp4PU9uAAAEAwBHMEUC
IQDzRY+a9v+3X+LZhfZsEF81Y6I7gnSOyaIfUwlochesZwIgR+/ws9AKYHt+VdZ3
/cx5q+u7UlLxvC3ySXLX5qpCCSYAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ
u7+rOdiEcwAAAYp4PU8tAAAEAwBIMEYCIQDJfabfPDqCYcsQYDi2LH1xQ12hW9jT
2AHxteDtxSSD3QIhAJjMXEH5fCBrcx9OEEORgZSFuoZEh3pmUqV9e1DwqTZhAHcA
2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGKeD1O9QAABAMASDBG
AiEA4Mxhrrqcfny2C7tHU1OrjP2RwNowR2gpzCuTcRyaS2ICIQC4Xyir3x2bIqpn
D0sikh/tHpxTsbDTtRKyv2Xwxr8oxTANBgkqhkiG9w0BAQsFAAOCAQEAHjj51LJg
5ygnt4XB717197XK+bFZy+wDdecXsWBG7OsOR2h+HGqBS4btlORZ8+DIQ6QcMdvs
hRqYLUB2zIMcMbqFgDJOcMHRBzCbr2iEyRD65D1oTwckXpA82Yb7Bd/obVuXT1GF
o660L2yrVwl76KwVLEUqFgRKyBVEEgSX5PabYeR58mJemnN3qyH/qoRj8q43g4vh
OYAPiToJRBEyYZXAXradS7Ag0ZNYRZpdKs3kNtCiQDw9m3LjrH6V2tA7mV+6TUua
XZm+OwRx5AYELK5F4uCQGT1A6GrXrXbh2FS/2FB8nRBguE0JEvM940gKJhNMcDs/
PptkWsfpR5aITQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22v8lGBUeFGZN5fxC4yM
0ZOE4auHlQg5mbkjy8kj7TO5wLJcjO1W3hSIMrTF5msFQPe62wl6ILipKMUehnZq
2DTK8m8yMJI6r29g5g+7mGHBjjTvDLgLSX1N3devrPCZQo5JOBBfToZm4r5dq1IF
Nvf29s8yHlZjA4UxHw8lwjflZIZpyy4FkrgY62N5wADJJXzqjTJKVibJUBw1khin
jozyRY58ulyMup7rd1RcY9YZtDAcf5ruVc+aHej1Dlsh5UG5bcKF16+qhudtnK96
5AhAIYSPLvXD2Xr7MNBbnpJI/k6TGB3rVvVIuiZvgIWeSpGnTcF6O0afYWms3KYi
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14601813463887770940017338703049445549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.crossknowledge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27699438983940690208944179030253026150766128939806272951495922282031425606037753651975120693751196093561758480309256439955781540482367491546377614532967724344426322420848501173902581308719489445947583416390302877034658875971761969777691928785842174776244928586590799437384634057440393715731877517525151132290138568485023804284469622869638050105040622927584541261703835411676087790768688137932714744699212059773344535644815063208272419072073185218954760767012579227514493080057354387239811399348716459603309783890676294061481798632096159875730924852098375461081967757132897431090643499618984001849181160443186220769797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d101125375f50c33aac4243c7388b6551a129d1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crossknowledge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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