*.ctjssl.info

- test -

Issued by Cybertrust Japan Public CA G3

About this certificate

This digital certificate with serial number 5f:d0:c9:26:18:9a:8c:ba:e7:48:49:19:77:f3:1b:72:53:31:a2:b7 was issued on by Cybertrust Japan Co., Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

test

Organization: test
Organization unit: test
State / Province: Tokyo
Locality: Minato-ku
Country: JP

Cybertrust Japan Co., Ltd.

Organization: Cybertrust Japan Co., Ltd.
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:d0:c9:26:18:9a:8c:ba:e7:48:49:19:77:f3:1b:72:53:31:a2:b7
Serial Number (int): 547010200762465291181239189225373411177284084407
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 39:29:bf:2c:31:66:d5:32:49:64:1b:67:6a:55:77:3e:8a:cb:3a:0c
AuthorityKeyId: 73:a8:08:53:29:b8:15:fb:99:80:e5:c5:37:d8:f8:39:7b:a4:13:06

Fingerprint (sha1): 3a:74:00:2c:7a:6c:2c:8b:e7:c3:0a:ba:ea:8b:d2:0b:ae:11:c7:2e
Fingerprint (sha256): 15:a2:8a:40:12:01:c0:23:c0:d8:81:b9:1e:34:5e:c9:f4:9d:09:31:10:c7:51:b1:34:ae:2c:48:24:09:31:dd

Issuing Certificate URL: http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/ctjpubcag3_sha256.crt

Revocation information

OCSP Server: http://ocsp.cybertrust.ne.jp/OcspServer
CRL Distribution Point: http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/cdp.crl

Check the revocation status for certificate *.ctjssl.info

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ctjssl.info

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ctjssl.info
ctjssl.info

Other certificates including the domain name ctjssl.info

(limited to 100 certificates)
1y.ctjssl.info
2y.ctjssl.info
sbov6m.ctjssl.info
sbev1y.ctjssl.info
evbct.ctjssl.info
2w.ctjssl.info
4y.ctjssl.info
1y.ctjssl.info
*.ctjssl.jp
3y.ctjssl.info
expired.ctjssl.info
6m.ctjssl.info
1y.ctjssl.info
2y.ctjssl.info
sbev2y.ctjssl.info
1y.ctjssl.info
3w.ctjssl.info
3w.ctjssl.info
1yev.ctjssl.com
evbctx.ctjssl.info
4y.ctjssl.info
*.ctjssl.info
sbov1y.ctjssl.info
1y.ctjssl.info
sbev2yw.ctjssl.info
sbov1y.ctjssl.info
1y.ctjssl.info
2w.ctjssl.info
2y.ctjssl.info
www.ctjssl.info
test1023.ctjssl.info
sbov3y.ctjssl.info
2w.ctjssl.info
hoov1y.ctjssl.jp
test20150601.ctjssl.info
1y.ctjssl.info
3w.ctjssl.info
sbov2y.ctjssl.info
syschk.ctjssl.info
sbov1y.ctjssl.info
sbev1y.ctjssl.info
evbct.ctjssl.info
dpasha2test.ctjssl.info
2w.ctjssl.info
sha1g3.ctjssl.info
sbev1y.ctjssl.info
4y.ctjssl.info
sbev1yreplace.ctjssl.info
2w.ctjssl.info
1y.ctjssl.info
1y.ctjssl.info
2w.ctjssl.info
sbov6m.ctjssl.info
2w.ctjssl.info
revoked.ctjssl.info
stdev.ctjssl.info
sbov1yreplace.ctjssl.info
sha1g3x.ctjssl.info
evbct.ctjssl.info
evbctx.ctjssl.info
1y.ctjssl.info
evutf8cnols.ctjssl.info
1y.ctjssl.info
g3-sanfull01.ctjssl.info
1y.ctjssl.info
revoked.ctjssl.info
*.1ywc.ctjssl.com
sbov3y.ctjssl.info
1y.ctjssl.info
*.ctjssl.info
sbev1yreplace.ctjssl.info
evutf8cnouols.ctjssl.info
2w.ctjssl.info
1y.ctjssl.info
ssup.ctjssl.info
vgrecc.ctjssl.com
*.ctjssl.info
1y.ctjssl.info
2w.ctjssl.info
sha1g2.ctjssl.info
sbev1y.ctjssl.info
1y.ctjssl.info
sha1g3x.ctjssl.info
2w.ctjssl.info
3w.ctjssl.info
sha1g2x.ctjssl.info
sbov2y.ctjssl.info
sbov1y.ctjssl.info
1y.ctjssl.info
2w.ctjssl.info
3y.ctjssl.info
6m.ctjssl.info
1y.ctjssl.info
1y.ctjssl.info
sbov1yreplace.ctjssl.info
2w.ctjssl.info
sbov6m.ctjssl.info
1y.ctjssl.info
dummy.ctjssl.info
1y.ctjssl.info

Certificate

The complete raw certificate details for *.ctjssl.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3greMzPYN1s2R+sS2YIO
NxBsS3AdoXQGJZuCbRUwtry8FALIsW3uki6anSiyxmVbZINIRWYGYOzVVnsA5gej
CKEM+/e6K3/Ql+eEOXTXNw6NOXbQWwzKcJzvzZZE8I/FDFDrafl0BVllmj1e8Ksg
aUkf/jNF+hlm+zQBAtfOAi1sNGXTXcsfdRJC/dMu+lDGw/SqFwAgbbKccfdmRnUH
zjAR/yfamOEJS6M1iqU5KvaHk44erSQrp5TZBJCaBkJmA4StWf3CL3RBfq0TOVX1
o05lZ/ESuoW5DRvX/ekGaohslHtKbdCM0mN2kWsGU5xKn6CxqHeDNfdgZFCxpJRL
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 547010200762465291181239189225373411177284084407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Public CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-12 02:56:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-31 14:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ctjssl.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28030262897614523034883750090240958676334189223231618856219719680799792022214256091721375476217426142158421172029265368539487522551684503014606338253599494260530964111164107204057109275524636037644229875923025388848716631974357551731343234425315125404438158098865923846544153762559465964936537797971818147518022358803543575740428345702517725080240748108775066928503630479305367578247738823128393613832970775535314678914758151710582716835982508909627232908605438489086162219319708257883414881702814031466875019989938827716415081556508991316677181665953497772554912446495490669062660636882562505067292817034296054533111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.392.200081.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [70 111 114 32 109 111 114 101 32 100 101 116 97 105 108 115 44 32 112 108 101 97 115 101 32 118 105 115 105 116 32 111 117 114 32 119 101 98 115 105 116 101 32 104 116 116 112 115 58 47 47 119 119 119 46 99 121 98 101 114 116 114 117 115 116 46 110 101 46 106 112 32 46]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.cybertrust.ne.jp/ssl/repository/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctjssl.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctjssl.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.cybertrust.ne.jp/OcspServer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/ctjpubcag3_sha256.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 73a8085329b815fb9980e5c537d8f8397ba41306
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sureseries-crl.cybertrust.ne.jp/SureServer/ctjpubcag3/cdp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3929bf2c3166d53249641b676a55773e8acb3a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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