uatdistributor.hdfcfund.com

- HDFC Asset Management Company Limited -

Issued by thawte EV SSL CA - G3

About this certificate

This digital certificate with serial number 55:ed:3f:80:40:89:4a:4b:ea:1c:45:3b:e2:78:a0:77 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

HDFC Asset Management Company Limited

Company registration number: 123027
Organization: HDFC Asset Management Company Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:ed:3f:80:40:89:4a:4b:ea:1c:45:3b:e2:78:a0:77
Serial Number (int): 114216241950173449547205509309322010743
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22

Fingerprint (sha1): cb:c4:5a:7a:c3:e2:ca:34:b0:e2:1a:4d:10:ca:89:79:28:e2:93:37
Fingerprint (sha256): 3a:36:5a:18:f3:d8:7c:2f:be:fb:ed:f2:04:68:32:24:46:b3:06:3e:c6:8c:87:67:5a:06:ff:b6:17:b1:45:ac

Issuing Certificate URL: http://ti.symcb.com/ti.crt

Revocation information

OCSP Server: http://ti.symcd.com
CRL Distribution Point: http://ti.symcb.com/ti.crl

Check the revocation status for certificate uatdistributor.hdfcfund.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uatdistributor.hdfcfund.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uatdistributor.hdfcfund.com

Other certificates including the domain name hdfcfund.com

(limited to 100 certificates)
elearn.hdfcfund.com
beta-api.hdfcfund.com
*.hdfcfund.com
beta-distributor.hdfcfund.com
elearn.hdfcfund.com
ssl631740.cloudflaressl.com
sni.cloudflaressl.com
amcoeuat.hdfcfund.com
ssl631740.cloudflaressl.com
elearn.hdfcfund.com
pms.hdfcfund.com
sni.cloudflaressl.com
ekyc.hdfcfund.com
elearn.hdfcfund.com
beta-api.hdfcfund.com
mft1.hdfcfund.com
mpower.hdfcfund.com
beta-api.hdfcfund.com
*.hdfcfund.com
ssl631739.cloudflaressl.com
sni.cloudflaressl.com
humanresource.thepawscuers.life
ssl631741.cloudflaressl.com
ssl631741.cloudflaressl.com
servicedesk.celestialsys.com
servicedesk.celestialsys.com
elearn.hdfcfund.com
api.hdfcfund.com
*.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
servicedesk.celestialsys.com
elearn.hdfcfund.com
sharedealing.hdfcfund.com
web.hdfcfund.com
ssl631740.cloudflaressl.com
sni.cloudflaressl.com
elearn.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
uatdistributor.hdfcfund.com
prisma.hdfcfund.com
investor.hdfcfund.com
elearn.hdfcfund.com
servicedesk.celestialsys.com
elearn.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
pms.hdfcfund.com
vision.hdfcfund.com
pms.hdfcfund.com
gitlab.hdfcfund.com
distributor.hdfcfund.com
sni.cloudflaressl.com
ssl631740.cloudflaressl.com
elearn.hdfcfund.com
*.hdfcfund.com
sni174955.cloudflaressl.com
gitlab.hdfcfund.com
ssl631739.cloudflaressl.com
elearn.hdfcfund.com
hdfcfund.com
*.hdfcfund.com
ssl631741.cloudflaressl.com
elearn.hdfcfund.com
investor.hdfcfund.com
sni.cloudflaressl.com
sni.cloudflaressl.com
investor.hdfcfund.com
gtac.plintron.in
pms.hdfcfund.com
ekyc.hdfcfund.com
*.hdfcfund.com
elearn.hdfcfund.com
ssl631739.cloudflaressl.com
investor.hdfcfund.com
*.hdfcfund.com
pms.hdfcfund.com
api.hdfcfund.com
sni.cloudflaressl.com
elearn.hdfcfund.com
investor.hdfcfund.com
sni.cloudflaressl.com
beta-api.hdfcfund.com
elearn.hdfcfund.com
elearn.hdfcfund.com
ssl631741.cloudflaressl.com
elearn.hdfcfund.com
uat-investor.hdfcfund.com
distributor.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
sni.cloudflaressl.com
itcare.hdfcfund.com
ssl631740.cloudflaressl.com
servicedesk.celestialsys.com
ssl631740.cloudflaressl.com
beta-investor.hdfcfund.com
ssl631740.cloudflaressl.com
elearn.hdfcfund.com

Certificate

The complete raw certificate details for uatdistributor.hdfcfund.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Kalqqhqv6JPnmlBd7GF
c0hQsr8Clz5mp+NKkt65aVqtDmEuA+2liIICDkgjHSjbt0V5xirPbphH3Hg3CfrQ
F+kJKEEs/2hh1SFj3Bml61rjlYgqV6WTy8RxhmX5TAW1UFIFMalX3F/leEkq3tg5
yA52IMWTsc+SpHVjLa7BAfopL7LTjN4PA5g/v1W1G9Cn8KrcPQvzBFeC7O7buJRd
ZRL2wxKBZT8vG6KHVJdrjJS4GR4tO0oEJwj4VOrR4lvBT1tzUUNpq7Hkuny7D0wH
oZxwb4pkbmjN/OwKYNcMFHdUxdHakm6rh51Dt9riqSWBy0SMczJlBwZFecJLCbFn
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114216241950173449547205509309322010743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '123027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HDFC Asset Management Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'uatdistributor.hdfcfund.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28864510297439185278471627697846731548238000854299496680940816109084054981596356330623877740400201158282568238682498575645206327794391379974523396300360516029768984650139156311032323215040704576139001930516154336508558440750294269030342043946874315128615306781521380590957477618029368468926961068257521349408512844026894262695013008168645974386848778576420931334218750155026045796739130940801265068155897809483159188994327946638654045294986031314131128734061303397178195196181582060659243082120254851615663666299095986493693353558968819834720220488804994305080722116540807404948320763085675475502741391568175205803809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatdistributor.hdfcfund.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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