forum.lifebit.ai

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:5f:3d:1c:9a:0b:22:97:2f:dd:7a:c4:eb:cb:07:26:0c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.lifebit.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:5f:3d:1c:9a:0b:22:97:2f:dd:7a:c4:eb:cb:07:26:0c
Serial Number (int): 273033052240412637412027313913884857280012
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:e0:2a:a7:56:c1:f1:1a:62:59:23:43:ee:96:c3:08:81:83:cb:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:0f:3e:c6:ee:1f:b9:86:ae:18:52:29:8a:95:55:45:60:77:44:c3
Fingerprint (sha256): 8b:52:c3:b3:6b:38:ca:3c:01:79:ab:32:8e:32:47:17:5d:6d:4e:ba:c3:10:a7:4d:b7:91:82:88:4b:39:5a:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate forum.lifebit.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.lifebit.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.lifebit.ai

Other certificates including the domain name lifebit.ai

(limited to 100 certificates)
forum.lifebit.ai
test-endy.saasquatch.app
*.sdlc-test.lifebit.ai
opendata.lifebit.ai
www.onpageideas.com
opendata.lifebit.ai
zabacus.org
www.excellfeeders.com
forum.lifebit.ai
elmoradillo.com.ar
opendata.lifebit.ai
tls.automattic.com
lifebit.ai
opendata.lifebit.ai
forum.lifebit.ai
tecto.app
derneuenovak.at
opendata.lifebit.ai
www.arches.app
ssrdigitaldisplays.com
travelgallery.in
www.lifebit.ai
test-endy.saasquatch.app
edubarbieri.com.br
www.upform.io
www.synsho.com
lifebit.ai
tls.automattic.com
alisdairmacleod.com
opendata.lifebit.ai
blog.lifebit.ai
sspuat.console.aigens.com
dylankamauoha.com
deploit.lifebit.ai
lifebit.ai
*.lifebit.ai
www.cedros.pe
forum.lifebit.ai
*.lifebit.ai
lifebit.ai
*.sdlc.lifebit.ai
*.lifebit.ai
*.lifebit.ai
tls.automattic.com
*.lifebit.ai
*.lifebit.ai
deploit.lifebit.ai
forum.lifebit.ai
tshirts.cortlan.co
silconp.com.br
admin.teetra.com
tls.automattic.com
lifebit.ai
www.sysdev.co.za
opendata.lifebit.ai
*.lifebit.ai
cloudos.dev.internal-lifebit.lifebit.ai
www.jackscherlag.com
forum.lifebit.ai
prmibr.com
*.lifebit.ai
adamscourierservices.com
diskover.app
www.chakkumkodefoods.com
tls.automattic.com
lbfrontiers.lifebit.ai
fromthisdayforth.ie
tls.automattic.com
lifebit.ai
lifebit.ai
julioromano.dev
lifebit.ai
admin.levelup-livetransfers.com
www.tweetsweep.app
*.lifebit.ai
floof.rodeo
buraqautomate.pk
test.blog.lifebit.ai
alisdairmacleod.com
*.lifebit.ai
tls.automattic.com
www.djolonga.com
*.lifebit.ai
beanstalk.simplesoft.co.nz
www.lifebit.ai
www.oversight.ai
lifebit.ai
www.dunware.com
lifebit.ai
lifebit.ai
forum.lifebit.ai
www.copiedapp.com
tls.automattic.com
lbfrontiers.lifebit.ai
tls.automattic.com
www.buk.app
*.lifebit.ai
www.lifebit.ai
www.lifebit.ai
selektor.myemmacloud.com

Certificate

The complete raw certificate details for forum.lifebit.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAyJfPRyaCyKXL916xOvLByYMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTgyMzE5MDlaFw0x
OTEwMTYyMzE5MDlaMBsxGTAXBgNVBAMTEGZvcnVtLmxpZmViaXQuYWkwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC+sHuArHrbzA9VEwGoG53NX+neNSY+
Eu4CwpGGzCL65lVNI8O4PkUtWL3Ix44RX68AQT3ezfNKowxhGfrwawXwt7TiJrpo
AOTC8kJ+RDru1wCTfLa/cXR+SnbvJQvurE9Fh2eHwPBFyj8MviyvchgbQ6M06Klu
HSdVGBQs5xcETQgtbqNaJz5CmQyO9wEzL6axf1NgO/7gEqb9rY5mkFkMIHcVQ3nh
UJu6452sWNaGc0giXPHatPogd2u6T+UrbzCYFUGOfU7kaSWLWNZYODpszwyFRHvY
Ku3Bq56bYRyT/Jn/99dM00YC7FJLelHs6aKUUvsbyjERG+t2T2fJyluhfrvqU4KV
ZfQWIWe4eUD/0TTig2RPNaIsLE3KrXrAqtfckqDEgVscysJEZk4os1yVL28LE5GC
LJ11YyZ6YGkcVwYHucDDishXzx96KY8Pej8KB02NRihnbXPdTupGaWlU05BY15TI
ywbF3hxaawiti290e764KD8V9+iJu7MsnKvKPkbQQEMnt+kFa29PDPE89FzbancT
x2hNMjZX4AlNJytaiHIQs4aReAml13RALNYyU2luhb23Zmn9yk8G5CMbAsz3pkND
8MmpVwtBzoKFEDhUGfqvb2CdGhK2rbJmOmNy8DK5TMchRiSSEmODzCw+i4DyUDlV
wV0pEX07u3DtOwIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTL
4CqnVsHxGmJZI0PulsMIgYPLwDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGZvcnVtLmxpZmViaXQu
YWkwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWwH
mMlKAAAEAwBHMEUCIQDkb8Otmd59B5XR85ACfyDMoj5ZYnMEWDMJaOmaIAKdQgIg
Dk6PeTLqAm3kgLo1QFx1lUhNP1KtwmcjLcchq+W6zcsAdgApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWwHmMlmAAAEAwBHMEUCIDPuj/oqEW0X8lEB
oiJNIAfYPe7qwc4s1DM2f83gPTlzAiEA9KnzqKdLKsiV9xKuvNxqiEcJZk54jzx2
wbjgTGufTD8wDQYJKoZIhvcNAQELBQADggEBAI8mauj4uJOPAQw5DIg0JQab2YNe
S+fWtVihBKmDbxk1/Z/WPuCK/zHLJnFsPNtWWmCAjo7J0u03SU6ItJyIvJ92+CFX
zmek7aJPgUA6HaT/gkIe8DCHIoukpdZRXjkyR8JBTI5vRVFSN5tTvN78NwtsHzpr
cwNQJsVh/Q7dCuTwVUpE1JYDsga+OoWjOMH7jsY8bb8KeOmy37UUPOeeU/UB3e0Z
LGfAu73xiVciTHO/yO+3/z2+YGpqq8ti8+ArQzqHF0hp11hi3WauUCxwC5DjEVRK
KOVCyFTQmvMBA5Gdhlh+A/Udv5dKBA9Uvu5z/k84VyuWhFbQJyI1IbFSaow=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273033052240412637412027313913884857280012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 23:19:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 23:19:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.lifebit.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777944816312313871990325484229549621130355578720076403025934071927558673225190287042868862156961168546825361748544147273096014801462211618052155651534938758567788278909583310013897227626914555197892767158971098297237627653881746778012703002051015995036482571831106934829393290111871446584866753696124344933866418328554644792520461923075240743306332690826783694425994649675074385897151571001130346196950692871578456605766254837089962757055935191942685183074174008947716130643466522576982025727093701597331558121198363626269748227065686469685403374793499457230827960854498984786366268759617383675561218880760631700906251133967500649994621468503331403698894614073960684426480213194042408304087751973290882293233844069955260300816872056626615102239030103547086942418768314146777048797681251543954449919126099056874661375434960426420088267434324344456383205338912725822853975984776055939784565746100364857471177816891029248239026674364722833330169073832247200902792686722941312906648931107375807451847353433819882622809964641286415278176614477118616224066742424649526917986844849210133445958934149454067153231630233795215666891474251457371044067801599783129638661732244777984410676718420599841156305797410367933407292259274314807535267131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbe02aa756c1f11a62592343ee96c3088183cbc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.lifebit.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c0798c94a0000040300473045022100e46fc3ad99de7d0795d1f390027f20cca23e5962730458330968e99a20029d4202200e4e8f7932ea026de480ba35405c7595484d3f52adc267232dc721abe5bacdcb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c0798c9660000040300473045022033ee8ffa2a116d17f25101a2224d2007d83deeeac1ce2cd433367fcde03d3973022100f4a9f3a8a74b2ac895f712aebcdc6a884709664e788f3c76c1b8e04c6b9f4c3f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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