lsmtest.atocrsp.org

- ATOC LIMITED -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:2d:89:0f:f3:6b:59:b2:26:3f:1e:d6:4f:44:1a:31 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ATOC LIMITED

Organization: ATOC LIMITED
Organization unit: LSM
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:2d:89:0f:f3:6b:59:b2:26:3f:1e:d6:4f:44:1a:31
Serial Number (int): 9541029283001252372602659376678050353
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 95:07:89:01:c6:ae:79:92:cf:0e:f0:89:7c:76:9f:4d:d4:99:f6:5e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ff:4d:aa:1d:3b:2a:e3:8a:9e:c2:bd:39:f6:4f:ba:5c:1c:78:ce:d3
Fingerprint (sha256): 19:82:5f:6c:db:88:51:9b:1e:94:eb:8f:c7:62:2a:0f:6c:3e:f7:01:0b:22:ee:9d:b8:b5:67:6a:18:b7:b2:51

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate lsmtest.atocrsp.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lsmtest.atocrsp.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lsmtest.atocrsp.org

Other certificates including the domain name atocrsp.org

(limited to 100 certificates)
lsmtest.atocrsp.org
esg.atocrsp.org
lsmtest.atocrsp.org
webdev.portal-env.atocrsp.org
opendj.uat01.portal-env.atocrsp.org
apioat.atocrsp.org
opendj.preprod01.portal-env.atocrsp.org
sso.atocrsp.org
ssouat.portal-env.atocrsp.org
elb-api.prod01.d4t-env.atocrsp.org
webval.portal-env.atocrsp.org
tmsapi.atocrsp.org
portalload.atocrsp.org
ssosystst.portal-env.atocrsp.org
support.test01.commonservices-env.atocrsp.org
tmsapiload.atocrsp.org
esgsystst.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
tms-flow-env2.atocrsp.org
lsmtest.atocrsp.org
ssovalpreprod.portal-env.atocrsp.org
web.atocrsp.org
portal.atocrsp.org
esguat.portal-env.atocrsp.org
ssoval.portal-env.atocrsp.org
ssolivetest.atocrsp.org
tmsapisecuremo3.atocrsp.org
ssovaldev.portal-env.atocrsp.org
ssouat.portal-env.atocrsp.org
support.test01.commonservices-env.atocrsp.org
esglivetest.atocrsp.org
tms-api-env2.atocrsp.org
ssopreprod.portal-env.atocrsp.org
weblivetest.atocrsp.org
ssouat.portal-env.atocrsp.org
lsm.atocrsp.org
esguat.portal-env.atocrsp.org
ssopreprod.portal-env.atocrsp.org
portal.atocrsp.org
ssosystst.portal-env.atocrsp.org
ssouat.portal-env.atocrsp.org
tmsapisecuremo3.atocrsp.org
tms-api-env2.atocrsp.org
*.atocrsp.org
mecportal.atocrsp.org
ssovaluat.portal-env.atocrsp.org
lsm.atocrsp.org
portal.atocrsp.org
tmsapi.atocrsp.org
*.atocrsp.org
webuat.portal-env.atocrsp.org
tmsapimo3-testing.sand.tms-env.atocrsp.org
portalload.atocrsp.org
opendj.dev01.portal-env.atocrsp.org
portal.atocrsp.org
esg.atocrsp.org
web.atocrsp.org
tmsapimo3-testing.atocrsp.org
webpreprod.portal-env.atocrsp.org
opendj.lvtst01.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
portalload.atocrsp.org
ssodev.portal-env.atocrsp.org
esgpreprod.portal-env.atocrsp.org
webvalpreprod.portal-env.atocrsp.org
esgsystst.portal-env.atocrsp.org
portal.mo3.iam-env.atocrsp.org
portalmo3.atocrsp.org
tmsapisand.atocrsp.org
apioat.atocrsp.org
tmsapi.atocrsp.org
weblivetest.atocrsp.org
opendj.prod01.portal-env.atocrsp.org
websystst.portal-env.atocrsp.org
portalload.atocrsp.org
opendj.uat01.portal-env.atocrsp.org
tmsapisand.atocrsp.org
lsmtest.atocrsp.org
web.prod01.d4t-env.atocrsp.org
esglivetest.atocrsp.org
webvalpreprod.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
webvalsystst.portal-env.atocrsp.org
webuat.portal-env.atocrsp.org
webvaldev.portal-env.atocrsp.org
sso.atocrsp.org
web.atocrsp.org
support.prod01.commonservices-env.atocrsp.org
lsm.atocrsp.org
tmsapi.sand.tms-env.atocrsp.org
esguat.portal-env.atocrsp.org
tmsapi.load.tms-env.atocrsp.org
portalload.atocrsp.org
esgsystst.portal-env.atocrsp.org
opendj.lvtst01.portal-env.atocrsp.org
ssovalsystst.portal-env.atocrsp.org
ssopreprod.portal-env.atocrsp.org
ssodev.portal-env.atocrsp.org
*.atocrsp.org
opendj.prod01.portal-env.atocrsp.org

Certificate

The complete raw certificate details for lsmtest.atocrsp.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWRiQdHZuNNO+1mjO4Ca
qwhCoVEyuHoHegp1nHbzaCSWac1URN8AaagCIAJyDqPqvXlDHkB6mH2M7n3Qwmqu
ct/GdDJWh9K9CMk4ow159v7dLkiT1Vx1RhYrFveT2vc7vZMhvwRv0HoQ8gPYcngV
zn2bCqA2P290fRtDG8SfulG6mEipMM6G3wdzp9Xq05FdcvybELUQX8BCysjysdC0
kaZ50KBXyILjsy/d3/tV/T/0zW+o/SaMValUacGTwSp1O5i7k5iao4ydSQp5aE0C
kYikLTjK/q3IxlYTAGOuagnC2OC8LLdkxVNPzmHLX9AAqnZTL+0oDF5EWXGBptsV
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9541029283001252372602659376678050353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ATOC LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LSM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lsmtest.atocrsp.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22393681084002378980915700615573890918243493233946845178378792889503571888712668517012439510919188887195302363365027939832639367289946406601893600881855965421677931185547864635195881884492602218035484830177169801889133129961249356956365246735114318285395088443913565780160662583370314489030265026053948596630804400315801737706590074840397946329616698203129381166581600268738409040714845617109659450688211207979740378210029441657374264312110332898531502599865467702463556874700452699111624444837900077213213831225943919538399012105617136259430623914859071900567194505975510169166697212585011708476733402072976600012143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95078901c6ae7992cf0ef0897c769f4dd499f65e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsmtest.atocrsp.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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