harald.com.br

- Harald Industria e Comercio de Alimentos S.A. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:ba:55:3a:72:f7:f2:a2:1e:17:4d:1a:b8:4e:2e:57 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Harald Industria e Comercio de Alimentos S.A.

Organization: Harald Industria e Comercio de Alimentos S.A.
Organization unit: IT
State / Province: Sao Paulo
Locality: Santana de Parnaiba
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:55:3a:72:f7:f2:a2:1e:17:4d:1a:b8:4e:2e:57
Serial Number (int): 4955179838673003377243541598609747543
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 1f:6f:60:66:a7:8f:85:c4:ea:46:71:df:95:e6:a1:2d:d2:72:fe:b1
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): b5:a2:c1:48:66:98:0e:51:ee:15:4d:2a:5b:a1:21:9b:5c:fd:24:33
Fingerprint (sha256): 41:87:17:05:de:06:47:d5:7c:50:00:8b:3f:1e:7a:02:8f:10:3f:24:a7:b6:c2:66:42:0d:24:f4:36:2b:36:f3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate harald.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for harald.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

harald.com.br
www.harald.com.br

Other certificates including the domain name harald.com.br

(limited to 100 certificates)
helpdesk.unitedwarehouse.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.gortons.com
iot-helpdesk.dtgo.com
iot-helpdesk.dtgo.com
support.blaney.com
servicedesk.mastercall.org.uk
supportdesk.highmarkfcu.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
www.harald.com.br
servicedesk.mastercall.org.uk
helpdesk.nwtc.edu
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
www.harald.com.br
helpdesk.abxpackaging.com
servicedesk.mastercall.org.uk
www.harald.com.br
supportdesk.highmarkfcu.com
2ssl.konviva.com.br
helpdesk.unitedwarehouse.com
helpdesk.unitedwarehouse.com
helpdesk.boire.qc.ca
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
www.harald.com.br
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
support.studio22.tv
helpdesk.vielis.co.jp
servicedesk.mastercall.org.uk
harald.com.br
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
itsp.tv2east.dk
2ssl.konviva.com.br
support.blaney.com
helpdesk.abxpackaging.com
servicedesk.mastercall.org.uk
supportservices.mitwpu.edu.in
servicedesk.mastercall.org.uk
helpdesk.abxpackaging.com
2ssl.konviva.com.br
support.blaney.com
servicedesk.mastercall.org.uk
servicedesk.deepbluecompany.com.au
servicedesk.mastercall.org.uk
www.harald.com.br
support.nbhandy.com
servicedesk.mastercall.org.uk
support.mycaravelautism.com
servicedesk.mastercall.org.uk
support.nbhandy.com
helpdesk.wcoomd.org
servicedesk.harald.com.br
boletos.harald.com.br
itsp.tv2east.dk
cm.helpdesk.carimed.com
servicedesk.gortons.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
helpdesk.nwtc.edu
helpdesk.vielis.co.jp
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
boletos.harald.com.br
servicedesk.mastercall.org.uk
iot-helpdesk.dtgo.com
servicedesk.mastercall.org.uk
crm.harald.com.br
supportservices.mitwpu.edu.in
helpdesk.boire.qc.ca
cm.helpdesk.carimed.com
servicedesk.mastercall.org.uk
ithelp.mainecc.edu
servicedesk.mastercall.org.uk
sd.globalrateset.com
crm.harald.com.br
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
www.harald.com.br
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
helpdesk.wcoomd.org
helpdesk.vielis.co.jp
support.mycaravelautism.com
servicedesk.mastercall.org.uk
helpdesk.vielis.co.jp
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk

Certificate

The complete raw certificate details for harald.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk7BWDqNox8EbILuuMER
8IXHyTea2pSWmnchae0mIbcOSlG2gWKg7WAPz8yUYTXLmdlLHYS13gpjnb3lt0vg
bbdIT1oWdtCmxYdE2FUDy2RJKHt6bGr2fR7ciBfWEEc6spchSbBOcFiS+MyrRTsj
XmHDGf7xOzdQYUDoHdCaeR+GibCzvEQlUed0+ItURzCHGa8r43LLfFyGoeEYrYot
YWwBSuYMj7SqZjEQzYM+VTM4WtyWJUrtF/YQDas+lFmjkamYSdYKCpAOIRCJkyiY
Gsa5f8/xy8xPSmZHpeIzrbfFqYNen+ilfsb0k8r2QbdGVeE7g71B2X2OZEt9f2lc
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4955179838673003377243541598609747543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santana de Parnaiba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harald Industria e Comercio de Alimentos S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'harald.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21499347506669325924071367327406970121440076340942619234295848587040754901187980091244981741587161537672055323658914873979536314668374275932141116271060475728929233933081384815576430258867251027638832022351836520106438049398005962791183883979106566474243526721519946964287622066071913815897235736101653886500258096900845291917011364304312850766531904371807048201684580380687215539161813142056162641531253723835807973521687932752684118166417517819874733499862547088900434746266425480078801172813393847872845355795601672409475813956565405905202740111374692046644070196728904426516465076630601040814814374512859170823193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f6f6066a78f85c4ea4671df95e6a12dd272feb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harald.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harald.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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