bms.envisionpharma.com

- Bristol-Myers Squibb -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 2e:b6:cc:14:6e:82:2a:a3:7d:a2:71:5e:6c:e2:6a:6e was issued on by GeoTrust Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bristol-Myers Squibb

Organization: Bristol-Myers Squibb
Organization unit: Global Development & Regulatory IT
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:b6:cc:14:6e:82:2a:a3:7d:a2:71:5e:6c:e2:6a:6e
Serial Number (int): 62093625064682576800183258958484630126
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): a5:ee:fe:71:98:b5:bf:35:2b:ae:6d:7c:9d:2b:c2:96:1b:93:24:9c
Fingerprint (sha256): 54:fc:7e:62:54:3c:3b:70:d0:19:3b:15:da:a0:2f:8a:d2:b2:7c:91:35:c2:39:99:a3:b0:3c:e2:b5:f5:18:0f

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate bms.envisionpharma.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bms.envisionpharma.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amylin.envisionpharma.com
amylin-stg.envisionpharma.com
bms-stg.envisionpharma.com
bms.envisionpharma.com

Other certificates including the domain name envisionpharma.com

(limited to 100 certificates)
suport.staff.utcluj.app
helpdesk.centurionukrs.com
www.envisionpharma.com
www.envisionpharma.com
*.envisionpharma.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
www.envisionpharma.com
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
*.envisionpharma.com
ithelpdesk.uteco.com
sd.sch1584.su
www.envisionpharma.com
*.production.etsaws.envisionpharma.com
www.envisionpharma.com
*.envisionpharma.com
*.staging.etsaws.envisionpharma.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
www.envisionpharma.com
dsi.alivetravel.com
www.envisionpharma.com
*.envisionpharma.com
*.envisionpharma.com
suport.staff.utcluj.app
bms.envisionpharma.com
www.envisionpharma.com
servicedesk.cheaperwaste.co.uk
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
*.envisionpharma.com
*.envisionpharma.com
www.envisionpharma.com
bms.envisionpharma.com
*.envisionpharma.com
envisionpharma.com
OneLogin.envisionpharma.com
helpdesk.derbigum.com
support-services.gruener-punkt.de
*.envisionpharma.com
servicedesk.quorumdev.com
ithelpdesk.uteco.com
*.implementation.etsaws.envisionpharma.com
*.envisionpharma.com
envisionpharma.com
techteam.awayresorts.co.uk
support.gjesdal.kommune.no
*.envisionpharma.com
ithelpdesk.uteco.com
*.envisionpharma.com
www.envisionpharma.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.envisionpharma.com
*.envisionpharma.com
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
bms.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
epukhovmweb01.envisionpharma.com
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
filesafe.envisionpharma.com
bms.envisionpharma.com
*.envisionpharma.com
*.envisionpharma.com
support-services.gruener-punkt.de
helpdesk.derbigum.com
*.envisionpharma.com
servicedesk.chsgroup.org.uk
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
bms.envisionpharma.com
envisionpharma.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
sd.sch1584.su
*.envisionpharma.com
www.envisionpharma.com
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
envisionpharma.com
companycentral-new.smarttuna.com
support.languagelink.ru
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
*.envisionpharma.com
*.envisionpharma.com

Certificate

The complete raw certificate details for bms.envisionpharma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RKMeJYbbVGcbbzyv/PX
g7nu/90f6sMS8kZ781eagn4VNcZC7M8TCr7Yh4mf2cRvF24nEftoCk4Ftv4ahOvZ
qMcA5G+cg13r2TIevE9OvvQJhppYxSl5psPOuuhNavCISNeGMHFqvegbBNXnwR6m
2rEhGFSagFoOBb/qLJUFd0AmiI+R7szfsM5pbGAJBkYb9+dlSYW8XI1LfbVOqXbW
jqS6KtX8oUEjrV6jrEPWnjn5IcTdD2t+V57bm5etWfYrknYRmyOrmEUNB7D2Jctw
QE4shLwtbb5/ajgU3Bza8W7EuKp4s7n/peCjHEja/s3Yc6p3xGZPVJZ2VDDV42r/
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 62093625064682576800183258958484630126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bristol-Myers Squibb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Global Development & Regulatory IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bms.envisionpharma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29927624989225901120236936443527451383958354106396011034552915979328487343992916999524785305091615041939759151293500784759948302077990060908450754666600833725668602732550750599545025687007464888183840699023520788829688884287404079923642819680021350187500948198790246616852039026994373918403560169994410212684184778441965244417741944507889147293807293392952908118402600190391735091749241555396631325013944629894057629296304444065214157748711854232691108547533705871519945238150647029284881439117834250399743998244879386273200896761018887167385771030911074579948306949768687723491181566676937673439964257525295810805743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amylin.envisionpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amylin-stg.envisionpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms-stg.envisionpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.envisionpharma.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015825e977e30000040300473045022020531b4dad0b6c01ba17170aa2abc60609ab450a7fd7e9c13ab2268209dbc837022100e37217cab77fb3dabe559f10b6012c2a406749da536b100ca8af2c2ab6dfe64c00750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015825e977fe000004030046304402207b52a472b3715b9b9c7267e8d14dcf6b9f43995aeae57b5a9acca8754f812de9022041f7136c5ba75dc75bf59fd54d2f37862c998ae55210a1431a7e0359fc49b19b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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