for-rest.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:2d:08:8c:31:0e:3c:f1:75:b0:57:23:d6:3b:ce:93:22:37 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=for-rest.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2d:08:8c:31:0e:3c:f1:75:b0:57:23:d6:3b:ce:93:22:37Serial Number (int): 363773211978975817506811823950587283841591
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c3:5e:b9:d3:1d:7f:5a:24:60:57:58:42:39:76:38:77:f5:ee:f1:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ad:6c:48:da:a0:36:02:28:5a:2d:2e:cd:41:5c:03:83:93:43:bc:42
Fingerprint (sha256): 43:ca:a8:e3:b2:e2:ec:10:34:9f:d8:71:ca:95:63:53:73:89:f7:c0:19:79:aa:c1:f3:35:e1:3b:a0:68:99:6d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate for-rest.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for for-rest.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
for-rest.cz
www.for-rest.cz
www.for-rest.cz
Other certificates including the domain name for-rest.cz
(limited to 100 certificates)
Certificate
The complete raw certificate details for for-rest.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHETCCBfmgAwIBAgISBC0IjDEOPPF1sFcj1jvOkyI3MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjIwMDM1MzNaFw0x ODExMjAwMDM1MzNaMBYxFDASBgNVBAMTC2Zvci1yZXN0LmN6MIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEA3cfo+UDT5IMxm2HIWvij++DsvYKJBTWoK6Qs TDR2yRuYUKkIxPJEmk2FTowYAqpx8ygxQLdVRlWJ+OWGc2HqfFm23wd5piZjP013 cziiFtBlmNRWwAAKLoN2oRer0eK4Nqobtq0unIpN5W6NfLjIOunJsqrFPvLp1yb2 eibWmBCM94b4fzGI4ywDj3Yu17NLxykODgxGzPsya2K+RPcIOEHWCw0XSZE/wWyD /2uvdZTV8Pngt6O3/mM/WKXnqsT/WWzibVEZvAZiB2qhk7LsTLUg4IOS8fBTm9nr Vw5dwJDBjppHqQhbipNBjh3H4jfg5QwFsOuksy1tfhq+ZYAJRKoFBsIEkvbTASou RlE33KaMvl4sUSGAnJn4LipUf0Vq7ZJmgj+YwrTaqIeJzlk8RJwuWIyl2n9J6NrD nf8sQ01AwkBy3lFFfwkFhcs2GM1s2HZ+oS5efbqvGzvbK097k2Os7sEBh3vSWNwz vmjwmbgrGlZLq/butZsyZihvKOCqV7ekWlTMbD1FYYznwTbd61l4LhdrHJLxWbrv nt8Tlibnf6+IBcuE140dhK6mEfE7OcZfxE+VE563oYpIgIQOdGHQ9TQFlZoJgG/b fXlRc6ALX6dbpHOmIe1gpM1Ow5p4pj+bTMntnjq/HQXwPgG/5u0AMo38UqiqofBh Wjzu2I8CAwEAAaOCAyMwggMfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUw1650x1/ WiRgV1hCOXY4d/Xu8RIwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeggtmb3ItcmVzdC5jeoIPd3d3LmZv ci1yZXN0LmN6MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEB ATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasG CCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxp ZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5j ZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9s ZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWVfRcdjAAAE AwBHMEUCIQDL13syDdyywuInHtau8cCUx0Rw9aAMMBe2GocK91JFUAIgY9JEonyQ isa3j9quHSKAg+EMCdK7XwRDjMkxuxFPl+8AdQBvU3asMfAxGdiZAKRRFf93FRwR 2QLBACkGjbIImjfZEwAAAWVfRceeAAAEAwBGMEQCIHVqYt/My2tVA26uY62VrpFw if/uqLa8JUQsW2X8uFPqAiA/5JZGytINuuSUwwGqTKMPcwHGk6lecS1ilk6FIUkC rDANBgkqhkiG9w0BAQsFAAOCAQEAgtqVbpP7djup41dJ0uayF8T6s7tUpdz0W7L6 F4RAvTgw0IhikHQeD+kurkeuOG1FFTd+9NUCNZ5pn1LfbbSlviFhFhKtJcmUOnrd HNibTL9jogUmcg5tdOHI8zjLQp0d0G7cQdAC6XeRasCgqENoX911J1yRTyT9MLXb LFrWN3Sp3l+84qe1rJ7CpO64lK+JIwJ2Td3MBIKYqnNZyKwl4kBxbMngOsBT4bUR HgS95J6vgj7LVa2ltuz0+eQnVe0O8GhSC7BycJHKLTJOLSfnucKA6FyCRLpiEK+J /YCWXoCQmrTAFnQNNZQQatxK62uan9ZmjTJSk2WQECYvBHwcmA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3cfo+UDT5IMxm2HIWvij ++DsvYKJBTWoK6QsTDR2yRuYUKkIxPJEmk2FTowYAqpx8ygxQLdVRlWJ+OWGc2Hq fFm23wd5piZjP013cziiFtBlmNRWwAAKLoN2oRer0eK4Nqobtq0unIpN5W6NfLjI OunJsqrFPvLp1yb2eibWmBCM94b4fzGI4ywDj3Yu17NLxykODgxGzPsya2K+RPcI OEHWCw0XSZE/wWyD/2uvdZTV8Pngt6O3/mM/WKXnqsT/WWzibVEZvAZiB2qhk7Ls TLUg4IOS8fBTm9nrVw5dwJDBjppHqQhbipNBjh3H4jfg5QwFsOuksy1tfhq+ZYAJ RKoFBsIEkvbTASouRlE33KaMvl4sUSGAnJn4LipUf0Vq7ZJmgj+YwrTaqIeJzlk8 RJwuWIyl2n9J6NrDnf8sQ01AwkBy3lFFfwkFhcs2GM1s2HZ+oS5efbqvGzvbK097 k2Os7sEBh3vSWNwzvmjwmbgrGlZLq/butZsyZihvKOCqV7ekWlTMbD1FYYznwTbd 61l4LhdrHJLxWbrvnt8Tlibnf6+IBcuE140dhK6mEfE7OcZfxE+VE563oYpIgIQO dGHQ9TQFlZoJgG/bfXlRc6ALX6dbpHOmIe1gpM1Ow5p4pj+bTMntnjq/HQXwPgG/ 5u0AMo38UqiqofBhWjzu2I8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 363773211978975817506811823950587283841591 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 00:35:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 00:35:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'for-rest.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904787127560155749644694053560957652201052773102996840829715650947874247238711343708902549003569753501901753677020632439615225761189641523623507047402134212595057275645602323677386978462806332917464410819997983091402819751883565303307883453725459033354912188984652212792649081234281755188370584096985555718050650644728858278183311086518371146338920181439107397523440784580220889475764259469752362808955237558904314544486357529741823892145355087615648280464970530457380218114744690090585633522725957207197828977592760616203211986865199455881897880519396180766610635934814678338705090161496387158475734025414083931729633665799807954338700310585504914918930873712805983291740470141854248112075069980124963901360075445002086054539638263966640295309036235785326309892253255448747709550386370995631525599244409144090079556878327111609986261479455574904389148045024257983482615888348402845414956733077256539744338261668583749850207170106600699846010915211666325654309847948644366859571907871725650416168881883920297272980444747879879176038917106357658082192072638131227492798402910342632980924120877868826138576603934717720292026725907835308442342108037250342845580066344990251970600082023762832565312919928555069314725253808205932935436431 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c35eb9d31d7f5a246057584239763877f5eef112 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'for-rest.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.for-rest.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001655f45c7630000040300473045022100cbd77b320ddcb2c2e2271ed6aef1c094c74470f5a00c3017b61a870af7524550022063d244a27c908ac6b78fdaae1d228083e10c09d2bb5f04438cc931bb114f97ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001655f45c79e00000403004630440220756a62dfcccb6b55036eae63ad95ae917089ffeea8b6bc25442c5b65fcb853ea02203fe49646cad20dbae494c301aa4ca30f7301c693a95e712d62964e85214902ac . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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