*.hastingsdeering.com.au

- Hastings Deering Australia Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0a:16:34:64:c0:57:ac:7c:00:00:00:00:51:00:ae:9f was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hastings Deering Australia Ltd

Organization: Hastings Deering Australia Ltd
State / Province: Queensland
Locality: Archerfield
Country: AU

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:16:34:64:c0:57:ac:7c:00:00:00:00:51:00:ae:9f
Serial Number (int): 13407573156379679216597590787185749663
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:71:2c:50:c7:63:48:f5:0e:2e:30:87:03:4b:75:e0:1c:f4:09:c1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f4:b5:76:e0:d8:15:88:71:0b:d9:30:5a:c1:cd:b3:88:7e:72:f8:1a
Fingerprint (sha256): 40:63:f7:d7:a7:00:73:c9:f2:fd:f8:48:7d:9b:18:d9:e5:93:ef:37:54:15:9c:fd:cb:5c:0e:3d:ee:ca:11:ca

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.hastingsdeering.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hastingsdeering.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hastingsdeering.com.au
hastingsdeering.com.au

Other certificates including the domain name hastingsdeering.com.au

(limited to 100 certificates)
email.hastingsdeering.com.au
email.hastingsdeering.com.au
login-uat.hastingsdeering.com.au
hastingsdeering.com.au
email.hastingsdeering.com.au
www.pulsekittens.io
webapp.gehape.net
akamaisecure4.qualtrics.com
staging-8d4d4.remoteafrica.io
akamaisecure4.qualtrics.com
akamaisecure4.qualtrics.com
friday.spirins.xyz
www.hastingsdeering.com.au
akamaisecure4.qualtrics.com
beeldverhalen.staatsbosbeheer.nl
hd.hastingsdeering.com.au
nordpole.at
qrcodes.hastingsdeering.com.au
email.hastingsdeering.com.au
devglomocontinuity.bbva.com.uy
prod-login.hastingsdeering.com.au
www.hastingsdeering.com.au
akamaisecure4.qualtrics.com
spendaware.me
www.medclar.ro
www.hastingsdeering.com.au
qrcodes.hastingsdeering.com.au
grafana.service.public.mcs.hastingsdeering.com.au
akamaisecure4.qualtrics.com
email.hastingsdeering.com.au
www.hastingsdeering.com.au
akamaisecure4.qualtrics.com
akamaisecure4.qualtrics.com
your.hastingsdeering.com.au
tumashev.com
covid19reports.app
email.hastingsdeering.com.au
www.prave.ca
email.hastingsdeering.com.au
sgp.hastingsdeering.com.au
akamaisecure4.qualtrics.com
mg.hastingsdeering.com.au
email.hastingsdeering.com.au
split.spoten.live
login-dev.hastingsdeering.com.au
vedantaspain.es
connect.hastingsdeering.com.au
prod-login.hastingsdeering.com.au
eureka.fastsp.net
email.hastingsdeering.com.au
www.qcerebrum.com
www.poolwater.app
hastingsdeering.com.au
hd.hastingsdeering.com.au
hastingsdeering.com.au
drcarmenjacobs.co.za
test.admin.thermolog.biz
akamaisecure4.qualtrics.com
akamaisecure4.qualtrics.com
akamaisecure4.qualtrics.com
hd.hastingsdeering.com.au
your.hastingsdeering.com.au
hsb-dev.moonland.world
email.hastingsdeering.com.au
haber.aytemiz.com.tr
your.hastingsdeering.com.au
akamaisecure4.qualtrics.com
email.hastingsdeering.com.au
login-dev.hastingsdeering.com.au
email.hastingsdeering.com.au
email.hastingsdeering.com.au
email.hastingsdeering.com.au
email.hastingsdeering.com.au
grafana.service.public.mcs.hastingsdeering.com.au
akamaisecure4.qualtrics.com
www.admin.minilemon.com.au
www.tryeat.me
email.hastingsdeering.com.au
www.hastingsdeering.com.au
akamaisecure4.qualtrics.com
colorantibottoni.com
login-uat.hastingsdeering.com.au
area51.abe.today
*.hastingsdeering.com.au
*.hastingsdeering.com.au
email.hastingsdeering.com.au
covid19reports.app
hd.hastingsdeering.com.au
email.hastingsdeering.com.au
grafana.service.public.mcs.hastingsdeering.com.au
qrcodes.hastingsdeering.com.au
email.hastingsdeering.com.au
et-matches-wilfred.skunk.dev
uflcssa.org
dvsos.hastingsdeering.com.au
icarus-map.shigureaya.me
hd.hastingsdeering.com.au
hd.hastingsdeering.com.au
akamaisecure4.qualtrics.com
www.qcerebrum.com

Certificate

The complete raw certificate details for *.hastingsdeering.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaNW85VCft3J8tj689HD
63PowQLYd2PTkKioujXVWIHLrZQJ8EKJuWJbzmzk1P6777aa0xoJ/VHL6jW6HXf9
zEpTxTuXhrW6R1rv+MUgDMRbTvwj5h6h+wdMOD4tR+ufqA8aOLUdoKYQhORAyqCd
nQP7DZaPUoQcCHMFdhFInO6IMl/ty7E5dmn0t4SusGB89pOhJOS8vZCxLjqplgWu
tE+Xabsee2k573mZIi8KiEJJl0/zRwnAgsxbcoBaefKrFFYmbwxWN0wiFhku1e2d
WlYU3EBFecNWEGvjdPuaJqsJOhUYb87K84O7wywyeScMTO2BNm948j8l54oRwJfi
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13407573156379679216597590787185749663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 00:24:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-16 00:54:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Queensland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Archerfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hastings Deering Australia Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hastingsdeering.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24444538643958461165037103487490493456367222103872299309580363863082920688129578178484883393639876433196696951576922260274178270485113493395305855863004066466428562460935101742381913344743299019563585195887549230324776236318747194830865970141776408110627118670465876920344106095091651729613663177392714150575503407630237421981861316809162622485218077946365233849386236089264459728093756881263066678642908542152340477838751844386479061725719115470292502597616596788401371578288813276240555299898483570777727650976579726207178983027892430778391028717392883270502589867527000951926168278218282578756577526612590746657509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hastingsdeering.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsdeering.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55712c50c76348f50e2e3087034b75e01cf409c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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