sugapi.verisign-grs.com

- Verisign, Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:52:7d:d6:19:5a:01:34:f9:45:17:aa:72:86:b0:86 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verisign, Inc

Organization: Verisign, Inc
State / Province: Virginia
Locality: Reston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:52:7d:d6:19:5a:01:34:f9:45:17:aa:72:86:b0:86
Serial Number (int): 7074460585197604010287681181269274758
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 05:c1:01:3c:95:83:39:0c:c4:6d:94:62:3e:3b:42:2f:e8:d9:5c:96
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 7d:34:1b:48:5a:24:b6:3c:30:b5:ed:02:13:27:8c:d1:7d:4a:69:40
Fingerprint (sha256): 18:c6:ea:bd:00:bd:fc:33:c1:44:68:df:0e:a3:9b:35:cd:7f:8e:b8:88:6f:90:0d:cd:37:14:cf:66:fc:a6:19

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate sugapi.verisign-grs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sugapi.verisign-grs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naming.verisign-grs.com
sugapi.verisign-grs.com

Other certificates including the domain name verisign-grs.com

(limited to 100 certificates)
rzms-kex.verisign-grs.com
ote-sugapi.verisign-grs.com
qa-auth-spa.verisign-grs.com
ote-ctldepp.verisign-grs.com
namestoreote-otp.verisign-grs.com
zms-epp.verisign-grs.com
rzm-ote-client.verisign-grs.com
ote-sugapi.verisign-grs.com
manifest.verisign-grs.com
coreui.verisign-grs.com
ote-dnssecsigningservice.verisign-grs.com
mbv-builder.verisign-grs.com
zms-kex-ote.verisign-grs.com
rzms-kex-ote.verisign-grs.com
ote-sugapi.verisign-grs.com
qa-namesuggestion.verisign-grs.com
domainscope.verisign-grs.com
namestoressl.verisign-grs.com
epp-ote.verisign-grs.com
naming.verisign-grs.com
namestoreote-otp.verisign-grs.com
mbv-mobileview.verisign-grs.com
vscc-dacust-ilg.verisign-grs.com
sugapi.verisign-grs.com
epp-ote.verisign-grs.com
namestoreote.verisign-grs.com
epptool-ctld.verisign-grs.com
epptool-ctld.verisign-grs.com
sugapi.verisign-grs.com
rzm-ote-client.verisign-grs.com
registrar.verisign-grs.com
ntia-ui.verisign-grs.com
sslftp-srs.verisign-grs.com
rzms-kex.verisign-grs.com
mbv-csrtool.verisign-grs.com
qa-epptool-ctld.verisign-grs.com
registrar.verisign-grs.com
ctldui.verisign-grs.com
mbv-api.verisign-grs.com
sugapi.verisign-grs.com
dnssecsigningservice.verisign-grs.com
sugapi.verisign-grs.com
registrar.verisign-grs.com
nsmanager-otp.verisign-grs.com
registrar.verisign-grs.com
csr.verisign-grs.com
client.verisign-grs.com
vscc-dacust-ilg.verisign-grs.com
ote-zms-web.verisign-grs.com
namestoressl.verisign-grs.com
otessl.verisign-grs.com
registrar.verisign-grs.com
testclient.verisign-grs.com
hud.verisign-grs.com
namestoreote-otp.verisign-grs.com
rzm-client.verisign-grs.com
csrote.verisign-grs.com
ctldui.verisign-grs.com
namestoreote-otp.verisign-grs.com
sugapi.verisign-grs.com
naming.verisign-grs.com
zms-web.verisign-grs.com
qa-akms.verisign-grs.com
ote-naming.verisign-grs.com
epptool-ctld.verisign-grs.com
nameweb.verisign-grs.com
nsmanager-otp.verisign-grs.com
qa-mbv-webtool.verisign-grs.com
otessl.verisign-grs.com
ipsapi.verisign-grs.com
namestoreote-otp.verisign-grs.com
ntia-ui-ote.verisign-grs.com
namestoreote.verisign-grs.com
namestoreote-otp.verisign-grs.com
zms-epp-ote.verisign-grs.com
nsmanager-otp.verisign-grs.com
ipsapi.verisign.com
ote-sugapi.verisign-grs.com
mbv-ote-csrtool.verisign-grs.com
knowledge.verisign-grs.com
vcc-reports.verisign-grs.com
namestoreote.verisign-grs.com
?.verisign-grs.com
nameepp.verisign-grs.com
epp-ote.verisign-grs.com
qa-akms.verisign-grs.com
rzms.verisign-grs.com
registrar.verisign-grs.com
ote-dnssecsigningservice.verisign-grs.com
ote-sugapi.verisign-grs.com
ote-sugepp.verisign-grs.com
namestoressl.verisign-grs.com
epptool-ctld.verisign-grs.com
epptool.verisign-grs.com
mbv-ote-api.verisign-grs.com
qa-mbv-mobileview.verisign-grs.com
rzm-client.verisign-grs.com
mbv-webtool.verisign-grs.com
lb1-cn1.verisign-grs.com
dnssecsigningservice.verisign-grs.com

Certificate

The complete raw certificate details for sugapi.verisign-grs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/EmhmoaZ4IjxzAtiDm0
hNQn+8VqLvYZG9vc3qqRcydt6R0p4KwVVHe8OmhNKWiVs7UtWGe5ex0oMGiTXRjU
CrvwzYJnjnRQqPKUlINzJgRxbQcPYX/FvyQkVYQ1H5ZofEEHKZ+hzG89or/EqUae
bgg4gZLWj/J/SjOLLvbIqOerQ2iY2wTI5IfO+S0k9/BAaamBEYRC0Fmzq7vZFNb6
V38TDv0nUTIFkmIwGCmk7zd5taG+yZlcsJbrkeIW+Ari0IAU09a5fNVOllmAoFnj
uTZpThYqiwrynBzOg9g8ixVCgwPA1w+gjvANq9mF/g80THzgvSSR88vIFlB7NyaN
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7074460585197604010287681181269274758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verisign, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sugapi.verisign-grs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21705665887126595755320663189823711416022039777792378267302946494122115466702851240744018640108380117789249296691193698753860509494258456264493063162998916308081719009819726827557553770722362840338874285524388311517975483243812650866603588374661744105989210246343634029633922920359355183090482251147063561966329497365214704027450478011366098476168142318234714871295573497548237639840087690976387818104674595860196928191875633671916780228946143166813357965540193671447441511469737620634630766179560118682734042280165701910081544007455110346046610666775701394548011535645958696884313079072232153952995927597093176642931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05c1013c9583390cc46d94623e3b422fe8d95c96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naming.verisign-grs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugapi.verisign-grs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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