*.netfield-media.net

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 02:cb:36 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.netfield-media.net,OU=GT11109013+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:cb:36
Serial Number (int): 183094
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): 7f:ce:3b:a8:a3:d1:77:cc:da:fb:5b:8d:33:04:3c:d9:7b:1c:26:11
Fingerprint (sha256): 71:f4:41:e8:25:0b:18:c4:c0:13:0b:ba:c2:8c:ba:e1:53:06:5d:55:ba:0f:a7:01:95:21:f9:70:c8:25:ef:24

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate *.netfield-media.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.netfield-media.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.netfield-media.net
netfield-media.net

Other certificates including the domain name netfield-media.net

(limited to 100 certificates)
test2-paygate.netfield-media.net
bankaccess.netfield-media.net
dev-contentadmin.netfield-media.net
dev-master-content.netfield-media.net
dev-contentadmin.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
bankaccess.netfield-media.net
dev-contentadmin.netfield-media.net
dev-master-content.netfield-media.net
test2-paygate.netfield-media.net
serv50d.netfield-media.net
bankaccess.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
demo.erofield.com
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
dev-master-content.netfield-media.net
bankaccess.netfield-media.net
paygate.netfield-media.net
dev-contentadmin.netfield-media.net
paygate.netfield-media.net
serv50d.netfield-media.net
test2-paygate.netfield-media.net
serv50d.netfield-media.net
*.netfield-media.net
serv501.netfield-media.net
paygate.netfield-media.net
test2-paygate.netfield-media.net
test2-paygate.netfield-media.net
serv50d.netfield-media.net
bankaccess.netfield-media.net
paygate.netfield-media.net
payment.netfield-media.net
test2-paygate.netfield-media.net
test2-payadmin.netfield-media.net
serv501.netfield-media.net
paygate.netfield-media.net
dev-contentadmin.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
paygate.netfield-media.net
dev-master-content.netfield-media.net
paygate.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
test2-paygate.netfield-media.net
paygate.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
serv50d.netfield-media.net
dev-master-content.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
paygate.netfield-media.net
paygate.netfield-media.net
test2-paygate.netfield-media.net
test2-paygate.netfield-media.net
paygate.netfield-media.net
dev-master-content.netfield-media.net
paygate.netfield-media.net
test2-paygate.netfield-media.net
dev-contentadmin.netfield-media.net
paygate.netfield-media.net
serv50d.netfield-media.net

Certificate

The complete raw certificate details for *.netfield-media.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIDAss2MA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMSAwHgYDVQQDExdSYXBpZFNTTCBTSEEy
NTYgQ0EgLSBHMzAeFw0xNTAzMDUwMzA5NDBaFw0xNjAzMDYxNDA2NTRaMIGYMRMw
EQYDVQQLEwpHVDExMTA5MDEzMTEwLwYDVQQLEyhTZWUgd3d3LnJhcGlkc3NsLmNv
bS9yZXNvdXJjZXMvY3BzIChjKTE1MS8wLQYDVQQLEyZEb21haW4gQ29udHJvbCBW
YWxpZGF0ZWQgLSBSYXBpZFNTTChSKTEdMBsGA1UEAwwUKi5uZXRmaWVsZC1tZWRp
YS5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQ8To3Jl9n7LBW
My85mGZiV2ifPKFDoXpU3e+CUss0ApHMFpUBf1TnjrKcUAcLu3YXAooPLXrnkD86
HnJhvejergyZeVmaxtCAVpl5Rd0fQiY577zdXoYLpnzNCH2arNpCLX1HL3kfgzBm
ix36LjYCPT6ZLNRrXP3B8YBErPP4ZTX7r7x0GRHDMtjAJhfhstoluLLrqPWdpT5r
lHWAyJqtL5sVbsj/aK1+glfPia/456pISczYAivr607VdQ2GR1sDQMWwWuC+tZGQ
k0flVYv/jemLPit76sFsHxL+VxCFmkaSoQ11WjHuQ1AT7c56da0V/1XODM5dmhL/
k/sxMQ6Mn0Ep+D3RQGtKRBibkR1LM1J8pD8GQWdlVgvvlwBPv25wnhBq2nsGt6nR
2Ko+0p589KmblRX0hXgKdH9j3CF6U9s5/KZBRjw/QpxDD/xpfstCYJk/Ko1hV11u
X1/DcCccEOPKl9/CXnEAz/+AHts4TbLgCx9lqSg3erkrTG3E9yzm6UJ4zhmvkuhO
r1JGA1V2ZYx0IS8ED7dScs1Hw3dv0FBbS85YqzBzoZaiL9l52dJ9+/xj2+0BQuza
ogMZSgCyVw2wGES806sBuO3jF5jbNYfhMTPfK5tZL3whlaU6CQHH/kwoNPQV/h4c
hh8CamekfcoRvo4slMxAhsC8p5DT7wIDAQABo4IBZDCCAWAwHwYDVR0jBBgwFoAU
w5zz/NNGCDS7zkZ/oHxb8+IIy1kwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzAB
hhNodHRwOi8vZ3Yuc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ3Yuc3lt
Y2IuY29tL2d2LmNydDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMDMGA1UdEQQsMCqCFCoubmV0ZmllbGQtbWVkaWEubmV0ghJu
ZXRmaWVsZC1tZWRpYS5uZXQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2d2LnN5
bWNiLmNvbS9ndi5jcmwwDAYDVR0TAQH/BAIwADBFBgNVHSAEPjA8MDoGCmCGSAGG
+EUBBzYwLDAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cucmFwaWRzc2wuY29tL2xl
Z2FsMA0GCSqGSIb3DQEBCwUAA4IBAQBk0+ccAzxYcdPWJ1w5ZFWv820Gd2GI80Y6
WQT9XFq85hSgVNvzZrOeucc2vOFgkv56ajCyuM7CSOifyH5659yulQhz1Pq2TnWE
gij6adNmwCrDqLJo/VeDRXIQ4qspoE5/zlxrBv1Wt4RRhnbPqedXY0kbpZST+Dwj
68vXN4q3mJCKC4b4hXi/IhgdZWVc0kOMIy2BJz7WNifovXA8hJL6VSv5UrD5KIMm
7oXggTTfMLGSohI+LEd8Ooh3AC0mj/yawKvXAE/SKbtmZiXX/SsSNAwQ+1VKvcqG
9FiBDZkRwWhViIfDMebuF+zlKF8sKsxkj3/aZJfn19OyCVH/2USw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-05 03:09:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-06 14:06:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT11109013'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.netfield-media.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852410192507000817422326816643953542016099933895815619015003924538567917306814993934137864402770563126203906494610661727424673909894339117039978119165290686430032298018111036963088216934185869863342766779644213155068238263130546202982636519619798216026083796620260995468506088933834024729913564846248418400580349247134087743826695535363414624727558954592149622414054700539349451386931737967364582925444958258612716252764997805034137720559577911610362465747231864887438884452925354616542856133380087190580751451158891630922648855044297168159849728905466642517100994616087061400844455918403344409874577787985392264046960115439542039901975021038401455363628197794489465968656401036099273812364053589684932189917629776378501945715071670713588949602178838612042904307944623295153910634991212535830730100265332411828882052935644228977985209661383130717950529892190712093826701597533067658150353819220493445112542484052493882070566972108404177786340443682853042673147006632910530647427667793349723122810112970948958504732853563239869149457390540404540315249497439796059724627549029072868757626771275206051244158745063521276175526319460265076999200095109164622437728594402967471132994553130923949595608189478685765202063332548769836340138991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netfield-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netfield-media.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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