mail.akcentral.com

- Abercrombie & Kent Ltd -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 3f:2a:2d:3a:fd:4a:74:06:00:d4:b2:bc:9f:64:2f:47 was issued on by GeoTrust Inc..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Abercrombie & Kent Ltd

Organization: Abercrombie & Kent Ltd
State / Province: Gloucestershire
Locality: Cheltenham
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:2a:2d:3a:fd:4a:74:06:00:d4:b2:bc:9f:64:2f:47
Serial Number (int): 83960357584563468806542915181006303047
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): ab:08:d0:0e:07:c1:62:3f:88:19:59:7f:9b:ab:05:38:b7:9b:db:1e
Fingerprint (sha256): 58:13:53:7f:73:d0:3b:89:86:80:cc:2e:ef:cc:f7:56:a4:61:4f:10:96:c0:f1:ba:a1:c6:96:ec:03:34:ca:c4

Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer

Revocation information

OCSP Server: http://gtssl2-ocsp.geotrust.com
CRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl

Check the revocation status for certificate mail.akcentral.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.akcentral.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.abercrombiekent.com
owa.abercrombiekent.com
autodiscover.akdmc.com
akhtcas01.group.abercrombiekent.local
akhtcas02.group.abercrombiekent.local
akmail01.group.abercrombiekent.local
autodiscover.group.abercrombiekent.local
usahtcas01.group.abercrombiekent.local
usahtcas02.group.abercrombiekent.local
usamail01.group.abercrombiekent.local
autodiscover.sanctuaryretreats.com
autodiscover.akorndmc.com
autodiscover.akcentral.com
autodiscover.abercrombiekent.co.uk
akhtcas03.group.abercrombiekent.local
mail.akcentral.com

Other certificates including the domain name akcentral.com

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
helpdesk.sicom.mu
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
sdpcloud.netwarx.com
ithelp.visionrt.com
ictportal.linkfinancial.eu
servicedesk.hermesairports.com
ithelp.mhphotels.com
ithelp.mhphotels.com
lync.akcentral.com
sdp.dilloneustace.ie
helpdesk.aerocompact.com
helpdesk.kleen-tex.eu
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
helpdesk.kleen-tex.eu
helpdesk.bedes.org
servicedesk.bat-agrar.de
helpdeskittest.zetes.com
aiseait.fuchs.com
support.erm.com
servicedesk.danbred.com
ithelpdesk.farnboroughairport.com
*.akcentral.com
helpdesk.hambroperks.com
ithelp.visionrt.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
helpdesk.troax.com
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
servicedesk.jmlgroup.co.uk
assist.pentest.partners
aiseait.fuchs.com
servicedesk.bwbconsulting.com
ithelpdesk.farnboroughairport.com
mail.akcentral.com
soporte.llorenteycuenca.com
noc.servicedesk.as
servicedesk.akcentral.com
assist.pentest.partners
assist.pentest.partners
servicedesk.medica.ie
ithelpdesk.farnboroughairport.com
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
assist.pentest.partners
assist.pentest.partners
assist.pentest.partners
helpdesk.actosoft.de
ithelpdesk.rev-log.com
sau.solarprofit.es
assist.pentest.partners
helpdeskittest.zetes.com
support.erm.com
servicedesk.bat-agrar.de
servicedesk.weareavidity.com
mail.akcentral.com
*.akcentral.com
helpdesk.bedes.org
mail.akcentral.com
aiseait.fuchs.com
mail.akcentral.com
servicedesk.hermesairports.com
ithelp.mhphotels.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
servicedesk.hermesairports.com
servicedesk.procentia.com
*.akcentral.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
servicedesk.winfieldunited.co.za
helpdesk.saviaantjes.be
ithelpdesk.farnboroughairport.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.fast.eu
helpdesk.kleen-tex.eu
helpdesk.vista.ch
it.littlegarth.org
assist.pentest.partners
ithelpdesk.farnboroughairport.com
it.littlegarth.org
helpdesk.nationalcaregroup.com
sistemes.accio.gencat.cat
*.akcentral.com
ictportal.linkfinancial.eu

Certificate

The complete raw certificate details for mail.akcentral.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC2lLC3/3jhK6f/ruC25
dkNn+RK0Zeqil0p2SMkZ9L9lTsUo4BNRRyXLHwj4NWvsTYexzJOywa7A7gNntFHj
AnD8nTDl2aAf8yjcXd4NDPpC8Y0Pl4dlmL3YyH+z8amKJBZsEjQnbnHv6w9lrT1i
58cJJZUGDqa5LWo8tZYxsqDQI3WPVhKFmw5fuC91QhcNht+AS9sR0Ib55/r62PhD
GGDKgwg9kMhitYDL27bmP+x17GsCOnwVHaBl2frZ/vDFwFBvYivbiCi7+jxt7scF
UeNaUd9E08kYYSanDgCFph/ySQI8yDU9BMyuxzOFAQ8I9zVii12B9HBnQxCiEKKe
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83960357584563468806542915181006303047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gloucestershire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Cheltenham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Abercrombie & Kent Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mail.akcentral.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25270169482886762247546384749519479763603471728668789992142476064104116208763028847948279062407715616866699895771599813141259742249175200788257551009409100451181157323665481354551237909698268238985604816887354519658979475957635860665344722424220094014014501043252442369068242097879862699940098627513163423095808094514381051642041821877538823132431669086876933244401116238518114688144225838101396827610928136900314099625148211228400521640084331693513489182439771196185303767300395650313292118451783104537241111121661254688685556938418485082051316679740809126866248897002708976657374197046596968316923828512421333605999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (550 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.abercrombiekent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.abercrombiekent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.akdmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akhtcas01.group.abercrombiekent.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akhtcas02.group.abercrombiekent.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akmail01.group.abercrombiekent.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.group.abercrombiekent.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usahtcas01.group.abercrombiekent.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usahtcas02.group.abercrombiekent.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usamail01.group.abercrombiekent.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sanctuaryretreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.akorndmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.akcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.abercrombiekent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akhtcas03.group.abercrombiekent.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.akcentral.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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