*.spocket.co
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 03:da:a7:62:20:ae:b6:a3:b9:b6:03:1a:aa:80:df:86 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.spocket.co
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:da:a7:62:20:ae:b6:a3:b9:b6:03:1a:aa:80:df:86Serial Number (int): 5122999639393812166393993460403199878
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 3d:77:1e:32:22:fe:bc:15:74:91:b1:3d:75:5b:ee:57:26:6f:7c:0b
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): dc:79:45:54:9f:e2:92:ae:41:85:b4:1c:1c:7e:d1:7a:a6:81:d8:18
Fingerprint (sha256): 66:65:0b:94:49:6a:14:77:f6:a0:86:e3:0f:c2:42:89:72:09:ad:cf:14:c7:90:54:23:d6:73:40:01:0d:99:06
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.spocket.co
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.spocket.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.spocket.co
spocket.co
*.spocket.ca
spocket.ca
spocket.co
*.spocket.ca
spocket.ca
Other certificates including the domain name spocket.co
(limited to 100 certificates)
support.spocket.co
www.spocket.co
newapi.spocket.co
spocket.co
www.spocket.co
spocket.co
*.spocket.co
spocket.co
*.spocket.co
academy.spocket.co
newapi.spocket.co
academy.spocket.co
www.spocket.co
www.spocket.co
spocket.co
api.spocket.co
www.spocket.co
spocket.co
spocket.co
*.spocket.co
academy.spocket.co
*.spocket.co
*.spocket.co
www.spocket.co
spocket.co
newapi.spocket.co
www.spocket.co
newapi.spocket.co
www.spocket.co
Spocket Inc.
www.spocket.co
www.spocket.co
newapi.spocket.co
*.spocket.co
*.spocket.co
www.spocket.co
www.spocket.co
spocket.com
newapi.spocket.co
spocket.co
www.spocket.co
Spocket Inc.
www.spocket.co
www.spocket.co
supplier.spocket.co
academy.spocket.co
spocket.co
newapi.spocket.co
spocket.co
*.spocket.co
newapi.spocket.co
www.spocket.co
spocket.co
academy.spocket.co
www.spocket.co
newapi.spocket.co
newapi.spocket.co
newapi.spocket.co
newapi.spocket.co
www.spocket.co
academy.spocket.co
academy.spocket.co
academy.spocket.co
*.spocket.co
newapi.spocket.co
newapi.spocket.co
spocket.co
api.spocket.co
www.spocket.co
www.spocket.co
spocket.co
www.spocket.co
*.spocket.co
newapi.spocket.co
newapi.spocket.co
spocket.co
spocket.co
www.spocket.co
spocket.co
spocket.co
*.spocket.co
spocket.com
academy.spocket.co
www.spocket.co
newapi.spocket.co
spocket.co
www.spocket.co
spocket.co
*.spocket.co
spocket.co
*.spocket.co
academy.spocket.co
newapi.spocket.co
academy.spocket.co
www.spocket.co
www.spocket.co
spocket.co
api.spocket.co
www.spocket.co
spocket.co
spocket.co
*.spocket.co
academy.spocket.co
*.spocket.co
*.spocket.co
www.spocket.co
spocket.co
newapi.spocket.co
www.spocket.co
newapi.spocket.co
www.spocket.co
Spocket Inc.
www.spocket.co
www.spocket.co
newapi.spocket.co
*.spocket.co
*.spocket.co
www.spocket.co
www.spocket.co
spocket.com
newapi.spocket.co
spocket.co
www.spocket.co
Spocket Inc.
www.spocket.co
www.spocket.co
supplier.spocket.co
academy.spocket.co
spocket.co
newapi.spocket.co
spocket.co
*.spocket.co
newapi.spocket.co
www.spocket.co
spocket.co
academy.spocket.co
www.spocket.co
newapi.spocket.co
newapi.spocket.co
newapi.spocket.co
newapi.spocket.co
www.spocket.co
academy.spocket.co
academy.spocket.co
academy.spocket.co
*.spocket.co
newapi.spocket.co
newapi.spocket.co
spocket.co
api.spocket.co
www.spocket.co
www.spocket.co
spocket.co
www.spocket.co
*.spocket.co
newapi.spocket.co
newapi.spocket.co
spocket.co
spocket.co
www.spocket.co
spocket.co
spocket.co
*.spocket.co
spocket.com
academy.spocket.co
Certificate
The complete raw certificate details for *.spocket.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIQA9qnYiCutqO5tgMaqoDfhjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDMyNzAwMDAwMFoXDTI0MDQyNDIzNTk1OVowFzEV MBMGA1UEAwwMKi5zcG9ja2V0LmNvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsh4/kdNLMQDkzgyfysvHqxfynITlhWjLyFg3+n9S/VBl75z70vuizI5K HZ3s2bye7jQfHYLbEKiM6BrKzXFLDlLhN7JLQhdWZ/dRp9V+26e+LM6jdihFl+BS m7LdBH64yUO8phxIaR1PakCEOBG9/wz4X5yf5U4E9INyQtWRdkD1k7QwxrKsnsW7 r6m9tGTW9j4v+j6Vred1qNZXrJlTgm0x0otTxa0lWy9N7utwNHQYtcq5qXUL24AD Zeg7k2wN+Kv8P0ULStPT2vRlOr3ZGnnExDi/2uR8nGI/yGAKUauS1llJdvSmnn1x J5F1ve8mYD70bU44f+k2xdXnTGTLyQIDAQABo4IDDjCCAwowHwYDVR0jBBgwFoAU gbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFD13HjIi/rwVdJGxPXVb7lcm b3wLMD0GA1UdEQQ2MDSCDCouc3BvY2tldC5jb4IKc3BvY2tldC5jb4IMKi5zcG9j a2V0LmNhggpzcG9ja2V0LmNhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5y Mm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EM AQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJt MDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAx LmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAYEGCisG AQQB1nkCBAIEggFxBIIBbQFrAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ RnEftZsAAAGHIS/vLQAABAMASDBGAiEAwb9ldFF31Ge/MeRVLCAOAPCfaTOL4Nn4 LWo5K37R4HoCIQDHbzwGkic5L3TZhHiPdvftFjrLda2zuN9kOaqhTcFgDQB3AHPZ nokbTJZ4oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABhyEv728AAAQDAEgwRgIh AKPi6q2nCP7YU2wamdNS4EZY3kfbD4dFhNhzcc0x9CjMAiEA2AylgwyfqYa/s6u5 H7PkIG3IVye47RUsc1+ugYDvGI8AdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ u7+rOdiEcwAAAYchL+8+AAAEAwBIMEYCIQCusceR54Fe9MJ16tXRClBY8eYsq5W8 63AqsSYthPnVsAIhALRByDEaJheJQ8EOLG63fEfHI5CYRZGtWbtWUN1VWn/NMA0G CSqGSIb3DQEBCwUAA4IBAQCaP85sEp5ySbxbGwztoX+DpqdhN5hbILDxTirejFrz nQQuKuu4riMmtZcqiDP9Tas8OFQhLZUhz/EXSHRlClKhO6SUA4csTUV/t/y5B/Ff bKtNb05FPhksfclvlgVqkqMW0VTYAlHCbiZCUPYUvQoWJ9P/j2SjdAnM6R0SiY6m HXfJrIs44EkcXduH4jYPNCwg7KqNen9EHge6F3xPf/PYThY0vDpgrUi7Ryqb5aBI 77eCH1cM2/iEHTa0P6zxJ/ohfTzoBvLMXe8HP/+BPHbNAcFPOVxPoGSRgEwnjF5+ Wf/MZfj9Q/mtrKHGOrQfk4gQcnkcuG9SeObIv45StlCd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh4/kdNLMQDkzgyfysvH qxfynITlhWjLyFg3+n9S/VBl75z70vuizI5KHZ3s2bye7jQfHYLbEKiM6BrKzXFL DlLhN7JLQhdWZ/dRp9V+26e+LM6jdihFl+BSm7LdBH64yUO8phxIaR1PakCEOBG9 /wz4X5yf5U4E9INyQtWRdkD1k7QwxrKsnsW7r6m9tGTW9j4v+j6Vred1qNZXrJlT gm0x0otTxa0lWy9N7utwNHQYtcq5qXUL24ADZeg7k2wN+Kv8P0ULStPT2vRlOr3Z GnnExDi/2uR8nGI/yGAKUauS1llJdvSmnn1xJ5F1ve8mYD70bU44f+k2xdXnTGTL yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5122999639393812166393993460403199878 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.spocket.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22485334285919498871533218840415790674149122876546567378781651385579762332213637430556256706066277161784418652769798020942354556153651840672339320924186694211382895919460030905492993481601315002365055548376209195153022187014261938936399500467733594352727172865138608857068700950844332048052160151058058380034562199671409081460329201445992552876558777492574380798464559262092443322501141422048086289260945659893078426474649784143788136694404976002656093145636642905111584277728729757909950389416449762911016582657832122550739722156365088237376985452467783119648484948640853809390790893603235142507093893591811190213577 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3d771e3222febc157491b13d755bee57266f7c0b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spocket.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spocket.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spocket.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spocket.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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