delegation-pp.paris2024.org

- PARIS 2024 COMITE D'ORGANISATION DES JEUX OLYMPIQUES ET PARALYM. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number b8:a2:d8:dd:2c:c6:49:c7:41:f6:8f:03:e8:88:f6:6d was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PARIS 2024 COMITE D'ORGANISATION DES JEUX OLYMPIQUES ET PARALYM.

Organization: PARIS 2024 COMITE D'ORGANISATION DES JEUX OLYMPIQUES ET PARALYM.
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b8:a2:d8:dd:2c:c6:49:c7:41:f6:8f:03:e8:88:f6:6d
Serial Number (int): 245423501839262523256183963732876523117
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 55:48:b3:6f:8a:06:8d:4e:d5:d8:fd:5e:41:3b:77:23:32:dc:ba:19
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 7d:42:01:ab:e7:fa:4b:da:8a:28:65:0b:b5:ff:0f:6f:5d:e5:98:46
Fingerprint (sha256): 15:85:5a:73:fc:9c:69:81:32:51:fa:9e:1a:89:ec:33:94:ca:d2:4c:08:71:bd:00:ae:da:ed:28:0f:6f:fb:2b

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate delegation-pp.paris2024.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for delegation-pp.paris2024.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

delegation-pp.paris2024.org
www.delegation-pp.paris2024.org

Other certificates including the domain name paris2024.org

(limited to 100 certificates)
concertation.paris2024.org
mulesoft-tkt.paris2024.org
*.paris2024.org
medical.paris2024.org
actualites.wiztopic.com
bo-cms-sbp.ew.paris2024.org
paris2024.org
oms.paris2024.org
api.academie.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
ensembleonfaitlesjeux.paris2024.org
celebrations-pp.paris2024.org
image.email.novartis.es
www.terredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
cert00033-azurecdn.akamaized.net
alerte.paris2024.org
bo.ew-dev.paris2024.org
concertation.paris2024.org
marathonpourtous.paris2024.org
*.paris2024.org
communautemarathonpourtous.paris2024.org
boutique-heritage.paris2024.org
registrations.marathonpourtous.paris2024.org
vdp.paris2024.org
rejoindre.paris2024.org
iextranet.oodrive.paris2024.org
ctp.paris2024.org
pressoperations.paris2024.org
spectrum-booking-portal-dev.paris2024.org
vdp.paris2024.org
image.email.novartis.es
boutique-terredejeux.paris2024.org
api.centredepreparation.paris2024.org
orah.paris2024.org
questionnaire-volontaire.paris2024.org
delegation-pp.paris2024.org
hospitalityguestregistration.paris2024.org
joly.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
waiting.paris2024.org
projet93.paris2024.org
ctp.paris2024.org
delegation.paris2024.org
tickets.paris2024.org
gigya.celebrations.paris2024.org
corporatehospitality.paris2024.org
data-accompagnement-impact.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
aap-impact.paris2024.org
www.boutique-celebrations.paris2024.org
sslcertificate7.queue-it.net
shop.paris2024.org
bo.spectrum-booking-portal.cms.paris2024.org
san-2-s50.tlsprovisioning.exacttarget.com
shop.paris2024.org
t.tickets.paris2024.org
t.tickets.paris2024.org
api.centredepreparation.paris2024.org
vdp.paris2024.org
actualites.wiztopic.com
vdp.paris2024.org
cominterne.paris2024.org
marathonpourtous.paris2024.org
marathonpourtous.paris2024.org
hrpaccount.paris2024.org
api.academie.paris2024.org
reglementmptc.paris2024.org
actualites.wiztopic.com
revealrelais.paris2024.org
de.newsletter.events.renault.com
marathonpourtous.paris2024.org
waiting.paris2024.org
api.centredepreparation.paris2024.org
marathonpourtous.paris2024.org
hospitalitytravelpackages.paris2024.org
exploreterredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
marathonpourtous.paris2024.org
tickets.paris2024.org
cert00033-azurecdn.akamaized.net
shop.paris2024.org
api.spectrum-booking-portal.cms-dev.paris2024.org
medical-back-pp.paris2024.org
centredepreparation.paris2024.org
concertation.paris2024.org
objets.paris2024.org
alerte.paris2024.org
www.terredejeux.paris2024.org
revealrelais.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
cost-tool-preprod.paris2024.org
offline-mediatheque.paris2024.org
data-accompagnement-impact.paris2024.org

Certificate

The complete raw certificate details for delegation-pp.paris2024.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aZGpQoJ3Wyvf/F+Mv/e
4h4h5d2303ou6WBsPBQNLuVp1+BJNbPSBOt1bdklVrcEsZKMuyoScgjLlKAm8MpB
AWVylcW5wGc8ZEtw3mJkhAVuq55Y9z3X+2tmoHvhsLjONyqX6ksqS3+H5VhTHS+0
M4XLnxrSEyEhsREOCFiJr1cZ+BIa8Opkz92AMT2zb9SgsmDtd/DK/1CzhyVnaAXc
66W57gE6LIyJVSIm0WKu85N+wHjMrjYbUleUsmH30GRONC9yRUl/8PdQiZZ9aVUH
UjL29Syuq4Zvx0DD/qVKA00y8qPO2ZON76n/q7dkB7yf9Wqe9dPTRGoXTn2+UtS3
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 245423501839262523256183963732876523117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS 2024 COMITE D'ORGANISATION DES JEUX OLYMPIQUES ET PARALYM.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'delegation-pp.paris2024.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27980659127251372716265926088658884113641792944935262628017286311497386187484116823131546212089882756973250382043494520042683119414229544317744064215488975398414100751949334950590863213432324432268973033525307564818840332593214788896746971037373842797823804259482440273301067119761052699192766337247605127333747087992035258965398468557381392608626434561051262303662836617535442374707846515765174770518275276417739420085655462788233003106818716355080032870203952128441369415391885020152015368066977987576993320514314532784185628893091333597303096439878442643361479818338606639395500001534448704136594989849951830587291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5548b36f8a068d4ed5d8fd5e413b772332dcba19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegation-pp.paris2024.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delegation-pp.paris2024.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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