apps.macwelt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:b6:59:12:e0:2d:12:4c:c2:25:1f:f1:b4:5a:31:7e:cf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apps.macwelt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:b6:59:12:e0:2d:12:4c:c2:25:1f:f1:b4:5a:31:7e:cf
Serial Number (int): 278933640500746296082544424600037896584911
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:f4:24:d5:cf:90:be:3c:d9:16:a9:3f:ff:f4:5a:82:99:fc:ec:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:23:68:65:be:f0:e5:6a:c1:d1:e7:02:f1:0e:00:97:71:3d:f4:c9
Fingerprint (sha256): 25:de:3a:f0:96:14:a9:44:fc:d4:3b:29:a9:17:b1:2f:f2:a8:f4:b2:29:d5:06:bb:9e:4c:06:2c:9e:34:e9:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate apps.macwelt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.macwelt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.macwelt.de

Other certificates including the domain name macwelt.de

(limited to 100 certificates)
cmp.channelpartner.de
magazin.macwelt.de
whitepaper.computerwoche.de
consent.planetradio.co.uk
*.macwelt.de
addefend.idg.zone
images.macwelt.de
*.macwelt.de
whitepaper.cio.de
mobil.pcwelt.de
amp.macwelt.de
images.macwelt.de
beta.computerwoche.de
*.macwelt.de
beta.computerwoche.de
api.pcwelt.de
amp.pcwelt.de
download.macwelt.de
mms.sp-prod.net
cmp.channelpartner.de
dg-0051-aa2de51.client-tls.adestra.com
macwelt.de
cmp2.channelpartner.de
mobil.pcwelt.de
magazin.macwelt.de
*.macwelt.de
dg-0051-aa2de51.client-tls.adestra.com
beta.computerwoche.de
apps.macwelt.de
macwelt.de
beta.computerwoche.de
magazin.macwelt.de
apps.macwelt.de
macwelt.de
beta.computerwoche.de
images.idg.zone
images.idg.zone
magazin.macwelt.de
beta.computerwoche.de
fia.pcwelt.de
magazin.macwelt.de
cmp2.channelpartner.de
beta.computerwoche.de
images.idg.zone
macwelt.de
macwelt.de
whitepaper.computerwoche.de
macwelt.de
amp.macwelt.de
cmp2.channelpartner.de
cmp.idg.tv
techrps.idg.zone
cmp.academics.at
cmp.academics.at
cmp2.channelpartner.de
cmp.academics.at
amp.pcwelt.de
macwelt.de
images.macwelt.de
images.macwelt.de
cmp.academics.at
images.idg.zone
macwelt.de
apps.macwelt.de
cmp.academics.at
beta.computerwoche.de
newsletter.pcwelt.de
images.idg.zone
shop.computerwoche.de
macwelt.de
magazin.macwelt.de
magazin.macwelt.de
cmp.idg.de
mms.sp-prod.net
amp.macwelt.de
cmp.idg.tv
macwelt.de
amp.pcwelt.de
whitepaper.computerwoche.de
macwelt.de
apps.macwelt.de
amp.pcwelt.de
cmp.academics.at
addefend.idg.zone
dg-0051-aa2de51.client-tls.adestra.com
whitepaper.cio.de
magazin.macwelt.de
mobil.macwelt.de
newsletter.pcwelt.de
whitepaper.cio.de
cmp2.channelpartner.de
api.pcwelt.de
techrps.idg.zone
*.macwelt.de
amp.macwelt.de
fia.pcwelt.de
techrps.idg.zone
macwelt.de
images.idg.zone
macwelt.de

Certificate

The complete raw certificate details for apps.macwelt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISAzO2WRLgLRJMwiUf8bRaMX7PMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTYwMTU3NTVaFw0y
MDAyMTQwMTU3NTVaMBoxGDAWBgNVBAMTD2FwcHMubWFjd2VsdC5kZTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMZdJdpSmlpfPKh4QIH6iK0eLNHBCvUg
6GKL48f+egNK22o9PkawKBtvJeK9Gz/ZA0oWC9wGHBNxyJ+LNpM26Zim3rPDtggR
YBT6fV/XBNTXbzimh8878vLEC1/Mq9yqkCPT1opjc0Q5ikHfnlKPw0x5sn1j2JQM
gqkmnHtEas7xBxlIRBHSQikJWbExCwyeA3bHXiF9Gdkb3nMYY8o8AYYEaABPsVdU
aDh84EpJt/thIcLwN2L9q8TaxQfaMXyXXIvc3NVzdg+2z6UuNdmBQ3IwLWV44Xny
pdSHgBRzVNNaVYaUTWO4lkNcIXjrob1baub38R0c828NPZHOBEZXDCqKFJapgVf3
wFM0GKd2Cnu7cF1P/X4nDA4WCrN9F5koIk36mYqFTA9vW9+GRAhq53urQKQR/usR
q8r/gij5HFHbbBHgHkmGyoiZR5AVxhpY0LRnSjA+xYWI3qTk41O1kNqxl5M7g/eV
Q5gdCq9YIobzgyvGG6RDYuAGjFSXqEN42pQ2tY0oR4+gDFt5/ETcATZltKFdH0oD
TI+Y0jRJdo2VJVTfv+vDMbhC21al1gBcULpal+s3fbiH6W+28J/LmQK/XaF5anX1
g7o5r9plY0UM3KhV7IJPdXVjj28EoWxFwHJdPkhzYVCHY8nZC6VTYbYUo49P/ZuY
JqNkuPAdpzVDAgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBL0
JNXPkL482RapP//0WoKZ/Oy+MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPYXBwcy5tYWN3ZWx0LmRl
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFuciVG
bQAABAMARzBFAiAq8luOng/srjKgxE10F//f8hdiZCeLR03B9xgumlHEkAIhAK/2
t0kICi5IoawTQb3nK5r0Y2ojlC3tIrOF8yIJq3E5AHUAsh4FzIuizYogTodm+Su5
iiUgZ2va+nDnsklTLe+LkF4AAAFuciVGWgAABAMARjBEAiBDLU6zLwYwEmRo9rBE
+WQjwa1udrfNvCsDcWTtgxuzngIgR+bHol2zsEZnVPln9v+jbGMvuCZ/cfGm6ksu
NpMUhAMwDQYJKoZIhvcNAQELBQADggEBAJATGq4ZLDcDZ3L9uGfcp0Q65em5nlr9
ASqkfQE8SDEjz4Er7a1wR3Ez9xGaTWsfu8zv55UxhIRy3tJilhae8sBpO29MJn4L
5/D/xKPkUo+LXDTLfHMOZHqkCp/+QW42S8CJugcVcdwBCBvakCXHb/9C1H0eFBWz
JodYNTWRKDstCzKIgyk7Kej8W6R/6Y9mJU5CIkzYFxODg+CxKkaLb1xq/5s8U7Va
EhGyqF0nisrmWnq7M3gwXxP6ZcITAc4mw/kmo8bOdY31XbqR8IKwqxkvKoHmDR0U
OjloFz+MLytYs1dsSTTkZDknTQjf5fBgAFixygSQd7x4h1Z/gIn9EGM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278933640500746296082544424600037896584911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 01:57:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 01:57:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.macwelt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809253940019009160526678778537717275353822301763301579708863563240269994223744885113504797888735859306299183869778050299504640067067524842620287430933613148697961441169140519229094153628567006709542825940530114584791014141428821813989816950738852105995508520182889847132925612780111731781642606782216624457992919957152752159177840216022880096582722452776133013997659781288486920304922906844791452183395114587883559006002035342013617901374754549056372988262125558085493983467583562666107779235311649137409986165648191631155155463000102712818614154251838515156413008292505834930525117673917658871322409664601065872607742677111384858627202628475668224440667333014581038619180379068854161405789124601692607921860126208420931554991881791838387091245915907189480614562245028353959481594842373734417011819046583005860251160712694552944666738224391947573233770778558406800572189953378145201718892567915118302685765402324329843969457393281139047039404839936938042031799934674783772845783927381745769846802178141992804476366759670919484774318274119514331335940141321836804173348682927473256084929188368132713312252717620363314331381499655384166890651358864732078831028913354025437111117378864225529521756593900016374622314280291614165498803523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12f424d5cf90be3cd916a93ffff45a8299fcecbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.macwelt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e7225466d000004030047304502202af25b8e9e0fecae32a0c44d7417ffdff2176264278b474dc1f7182e9a51c490022100aff6b749080a2e48a1ac1341bde72b9af4636a23942ded22b385f32209ab7139007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e7225465a00000403004630440220432d4eb32f0630126468f6b044f96423c1ad6e76b7cdbc2b037164ed831bb39e022047e6c7a25db3b0466754f967f6ffa36c632fb8267f71f1a6ea4b2e3693148403
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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