mail.ihc.com

- Intermountain Health Care Inc. -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 12:94:94:d9:0c:49:8c:26:16:68:42:49:a6:7e:b2:2a was issued on by VeriSign, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Intermountain Health Care Inc.

Organization: Intermountain Health Care Inc.
Organization unit: Intermountain Health Care Inc.
State / Province: Utah
Locality: Salt Lake City
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:94:94:d9:0c:49:8c:26:16:68:42:49:a6:7e:b2:2a
Serial Number (int): 24697582852126979780461541190247821866
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): e2:ac:4d:9e:3a:12:4f:f4:89:db:8d:61:82:d8:8a:fc:d4:20:19:ed
Fingerprint (sha256): 26:45:47:a9:f9:5e:ce:b8:15:81:85:da:4e:b0:1b:aa:48:90:66:c7:8a:41:41:5a:24:58:c4:41:d6:7d:1f:59

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate mail.ihc.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.ihc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.ihc.com
autodiscover.selecthealth.org
autodiscover.imail.org
autodiscover.hdwa.org
autodiscover.imail2.org
legacy.mail.ihc.com

Other certificates including the domain name ihc.com

(limited to 100 certificates)
ideaprod.co.ihc.com
*.sbx.ose.ihc.com
awdwebupg.co.ihc.com
lpv-isystoc02.co.ihc.com
lpv-pciwsndev01.co.ihc.com
www.ihc.com
lpv-infaappsbx01.co.ihc.com
xtweb.co.ihc.com
hp-ctm03.co.ihc.com
scmobile-test.co.ihc.com
lpv-eitiaee02.co.ihc.com
xeconnect-prod.co.ihc.com
dfd-api.intermountainhealthcare.org
lpvagfascas01.co.ihc.com
kr-test.co.ihc.com
finance.co.ihc.com
emaild3.ihc.com
tx-email2.ihc.com
*.k8s.ihc.com
webitfmsg.co.ihc.com
lpv-cccssgwdev01.co.ihc.com
emaild1.ihc.com
accesshubtest.co.ihc.com
www-clin.ihc.com
emaild2.ihc.com
help2-lp.co.ihc.com
txv-ccartst01.co.ihc.com
www.ihc.com
scmobile-test.co.ihc.com
idptst.co.ihc.com
ciamdir.co.ihc.com
www.ihc.com
tacweb-test.co.ihc.com
lpv-scsolrstg01.co.ihc.com
lpv-edwaedev01.co.ihc.com
tx-email2.ihc.com
scmobile-dev.co.ihc.com
SHMYHEALTHTEST.CO.IHC.COM
mkv-ensiseadm01.co.ihc.com
iamacc.co.ihc.com
lpvagfasgti01.co.ihc.com
www.ihc.com
hieapp.co.ihc.com
accesshubtest.co.ihc.com
dirimap.co.ihc.com
lpv-issadsso.co.ihc.com
lp-itfprd01.co.ihc.com
icare.intermountain.net
lpv-imcrx01.co.ihc.com
txv-issadsso.co.ihc.com
www.ihc.com
LPV-MUSEAPPT01.CO.IHC.COM
lp-adweb01.co.ihc.com
dirimap.co.ihc.com
lpvagfascas01.co.ihc.com
rso.co.ihc.com
lpv-pciwsntst01.co.ihc.com
kr.ihc.com
idpiam.co.ihc.com
shweb.co.ihc.com
hpv-shsdev1-01.co.ihc.com
txv-hiegwprd01.co.ihc.com
lpv-ipgsequortst01.co.ihc.com
kr.ihc.com
cernercitrix.co.ihc.com
mail.ihc.com
lpv-mgrmsweb01.co.ihc.com
www-clin.ihc.com
ldapdevvip.co.ihc.com
lpv-issacpmdv01.co.ihc.com
*.sbx.k8s.ihc.com
TSTFAC.CO.IHC.COM
idpciamtst.co.ihc.com
xtweb.co.ihc.com
storefront.co.ihc.com
iamacctst.co.ihc.com
smtp.co.ihc.com
LPV-PSR1SQLT01.CO.IHC.COM
lpv-lisccadm01.co.ihc.com
lpv-sirentapp01.co.ihc.com
*.apps.prd2.co.ihc.com
mkv-ensiseadm01.co.ihc.com
ciamdir.co.ihc.com
awdwebprod.co.ihc.com
avayafinprxy.co.ihc.com
lpv-pciwsndev01.co.ihc.com
mail.ihc.com
ciamacctst.co.ihc.com
alertus.intermountainhealthcare.org
LPV-MUSEAPPT01.CO.IHC.COM
lpv-erpdkrdev01.co.ihc.com
awdwebtest.co.ihc.com
lpv-sirentapp01.co.ihc.com
emaild1.ihc.com
ciamacc.co.ihc.com
proxy.ihc.com
ciamfedtst.co.ihc.com
dfd-api.co.ihc.com
pingconsumertst.co.ihc.com
txv-hiegwtst01.co.ihc.com

Certificate

The complete raw certificate details for mail.ihc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxaFKrZdOsw/YRx1h709
23C524f+mBSng2/9UMx2qraVT02YC0/DOQs4EzJo04mkZ1OxikMHcb6kERreUNL1
/74ECgvCwl8Y730UFyIoVJaktgxknxc29EqAlhuUorj7aI6qQO6UOG9FTzev46Pt
7eYIVINwa0dK659XSBUtWT9u8dSxmjp0XfZGPQzohPPWJNbnHRu2EZ40Iba8Ej2W
5sEzg9tZyCkQsNBkqvKha41hWv/tu8kei+m0efVWLsbnuVc+wfN0wSgwbeiYCx3T
9bCl7Jgs1Q/DM7bP/BfGOj1LzRiAoWPwGPmH3m+ILeYd3+XZPrUHI1XDB3aiY/mi
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24697582852126979780461541190247821866
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Intermountain Health Care Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Intermountain Health Care Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mail.ihc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25637481024235069391880110206455212905714125622944796388088265008873131071712576039263493613164877197849255882756582362696151830954804890608236798578957365243405849836127335471774069869591064272804391345179609966264442745278093835614620923456389604790205193802716336699143009341129719643192609791346819214489425710695873192238359937726199223257065670323403389271194863315556720031422132996070099152584873010563809359441956468949045397010974879779808512386526381651438141457126981368991897132862174385062624389705997303040634718983023485496380018628589798876918004904910246474148959175427532338821186831621909047255667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ihc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.selecthealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.imail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hdwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.imail2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.mail.ihc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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