payonline.westminster.ac.uk

- University of Westminster -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:a5:1a:6a:ca:59:1f:84:3d:08:8d:9d:38:6f:94:0f was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Westminster

Organization: University of Westminster
Organization unit: Admin
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:1a:6a:ca:59:1f:84:3d:08:8d:9d:38:6f:94:0f
Serial Number (int): 4844948772471630847456273929495090191
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 9a:e2:9c:e8:b7:4b:5b:92:9e:c0:48:b1:8b:3d:ca:6d:79:97:55:1d
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 44:7b:8c:d1:00:70:46:c0:c7:6d:a9:1e:9f:7b:17:ce:cf:88:2b:40
Fingerprint (sha256): 2f:58:1d:7d:58:8b:97:e3:ab:b1:96:2c:2e:df:73:0c:7b:80:59:14:ca:ca:3b:c3:41:ab:5a:9d:3c:2d:64:fb

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate payonline.westminster.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for payonline.westminster.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

payonline.westminster.ac.uk

Other certificates including the domain name westminster.ac.uk

(limited to 100 certificates)
learning.westminster.ac.uk
your.westminster.ac.uk
sgd.westminster.ac.uk
identity.westminster.ac.uk
sni.cloudflaressl.com
ssl758755.cloudflaressl.com
svn.ecs.westminster.ac.uk
bbreportingproxy.westminster.ac.uk
ssl758755.cloudflaressl.com
smtpout.westminster.ac.uk
prospect.westminster.ac.uk
support.ecs.westminster.ac.uk
bomgar.westminster.ac.uk
wificon.westminster.ac.uk
login.ecs.westminster.ac.uk
webmail.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
library-catalogue-test.westminster.ac.uk
timetabling.westminster.ac.uk
resolveitdev.westminster.ac.uk
financelive.westminster.ac.uk
eu-central-1-san1.blackboard.com
lists.westminster.ac.uk
mobile-app.westminster.ac.uk
emea-san1.blackboard.com
resolveitdev.westminster.ac.uk
epayments.westminster.ac.uk
uniprint.westminster.ac.uk
store.westminster.ac.uk
ssl758755.cloudflaressl.com
emea-san1.blackboard.com
accommodation.westminster.ac.uk
vacancies.westminster.ac.uk
eu-central-1-san1.blackboard.com
*.ezproxy.westminster.ac.uk
payonline.westminster.ac.uk
printportal.westminster.ac.uk
bi.westminster.ac.uk
*.users.ecs.westminster.ac.uk
shortcourses.westminster.ac.uk
sgd.westminster.ac.uk
library-collections-search.westminster.ac.uk
folio.westminster.ac.uk
intranet.ecs.westminster.ac.uk
prospect.westminster.ac.uk
eu-central-1-san1.blackboard.com
learning.westminster.ac.uk
teamwork-internal.westminster.ac.uk
emea-san1.blackboard.com
esp.westminster.ac.uk
library-collections-search.westminster.ac.uk
password.westminster.ac.uk
identity-test.westminster.ac.uk
timetabling.westminster.ac.uk
eu-central-1-san1.blackboard.com
webprint.westminster.ac.uk
jssadmin.westminster.ac.uk
engage.westminster.ac.uk
helpdesks.westminster.ac.uk
support.ecs.westminster.ac.uk
uniprint.westminster.ac.uk
vapplications.westminster.ac.uk
*.test.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
download.ecs.westminster.ac.uk
library-catalogue.westminster.ac.uk
housing.westminster.ac.uk
eu-central-1-san1.blackboard.com
financetest.westminster.ac.uk
summeraccommodation.westminster.ac.uk
hub.westminster.ac.uk
emea-san1.blackboard.com
accommodation.westminster.ac.uk
research.westminster.ac.uk
myintranet.westminster.ac.uk
emea-san1.blackboard.com
*.ezproxy.westminster.ac.uk
uowmail.westminster.ac.uk
upload.ecs.westminster.ac.uk
portal.ecs.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
penguin.ecs.westminster.ac.uk
intranet.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
support.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
mailinglist.westminster.ac.uk
payonline.westminster.ac.uk
library-catalogue.westminster.ac.uk
financelive.westminster.ac.uk
devtesthub.westminster.ac.uk
identity.westminster.ac.uk
citrixvip.westminster.ac.uk
vapplications.westminster.ac.uk
emea-san1.blackboard.com
task.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
guestwifi.westminster.ac.uk

Certificate

The complete raw certificate details for payonline.westminster.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzogC/hM+tZtSF/cr06Ic
GtX/SglPrFRfc1UcYuAFILMlH+7WC3U6WHxcer7hP27qQQmt++SbOC0yn4ZbK/Hx
agdXKC+b3sMdcqpCGMv3nrjBqwaaOBoeZjhuDilJRedy9a4ssgjNxEHotuFJQdp0
LBw+2PtEOeIS25tRsgI7pHQVSIJ0GXtb8BdWikMQTPEPJ61hEA0PWTg0ATW7mjNg
pQA/VycBbXmi8ZNXdy74VNT1vCBgiAVdPdeRtEPEHpZvu8kSK0CaRAkpw3xxn1hx
maeeP4KLwe6W6Bt9lHT54Y4qbNyUM4RrM/kmov3v8h2I0wp7s8jPvofARX/flt0n
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4844948772471630847456273929495090191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Westminster'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Admin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'payonline.westminster.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26072160686769168064207372212786162856698908945769354720747975963124393481324215955481499541706974147640083908367232662581135064029917420067588466779716415485834207978968424575659459496253138183660777648988840791700326995234474456616740387073164207359945367195452439763406159962457471483193910833185774859592335335686765045867248368895303497058143205879114386645038323188925271668305008041362597699411221625054070925083540600002463337331003401569412881676294396142002146059409181874509461682929389024466275096844945477140416494726941321902516118348772423319530458710481953469442826176521189488283108674784757553113011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ae29ce8b74b5b929ec048b18b3dca6d7997551d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payonline.westminster.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016546f2a91400000403004630440220678ab6be861cc6d8590eb00e6811196af6428f21f8ddc8540ef83703fffb51f902206ddf7c1816ab800ea9ce952c687893098120f3c622377177ee9869c6e2e018080076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016546f2a8e80000040300473045022100c9e199c20377c30622933c7c67b2c7a1e4ae094eb3caa62cf86102d703d25da802202a56c852904ad4813a3f6b3bbd93dba2b7638acc052f33324d6d731bd2539d78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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