*.freedca.mp

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:58:f7:bb:5a:2a:67:44:a8:6b:b6:a3:c9:0c:9e:4c was issued on by Amazon.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.freedca.mp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:58:f7:bb:5a:2a:67:44:a8:6b:b6:a3:c9:0c:9e:4c
Serial Number (int): 13754226680143629128981796875284553292
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ee:92:f4:94:5f:27:83:b0:8b:e1:d7:c3:12:0e:78:82:b7:a4:db:3e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 35:46:83:d1:45:0d:29:71:42:e2:8e:06:60:68:49:5c:f7:bb:de:28
Fingerprint (sha256): a7:74:7e:fb:39:c2:24:6a:24:ba:da:49:55:5b:d0:09:6a:2b:2b:13:8c:26:72:5a:c3:a2:7f:04:45:ed:d7:aa

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.freedca.mp

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.freedca.mp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freedca.mp
clients.completemarketer.com
projects.codevelopment.com.au
portal.1stsupport.com
projects.optsus.com
project.digitalmindsbpo.com
dashboard.triadmultimedia.com
projects.victoria.pm
projects.vicinity.studio
team.blueboxglobal.com
projects.experiacreative.com
project.mythoslife.com
projects.richardsonmarketing.com.au
huddle.isev.co.uk
projects.dadscorp.com
my.webarchi.com
team.danugrahregency.com
projects.sixvirtual.com
app.adityaraj.com
portal.phoenixallsaas.com
plan.matic.co
portal.ntansa.com
clients.lavenderturtle.com
projects.ecetera.si
camp.texonica.com
projects.eob.one
projects.optech.net
team.owl.la
projects.beseentoday.com
pm.eikonikos.com
projects.crylim.com
portal.impressive.cz
clients.ivy.social
projects.thinkingkaplearning.com
projects.drenalin.biz
portail.easytek.io
projects.plannit.com.au
team.pimicro.com
project.dayella.co

Other certificates including the domain name freedca.mp

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.freedca.mp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzwDhsnPRv8vs/RDoJpu
1CwOD2eJXfZ3BaR/4nhGmEhavH5gFZulRJY7ZWVXPfQi5bkutVwwQxHMrs85pxla
2y/Rh5QKEmUOo80ghYtJa07I+q9nQ425Q3A1fsXvpQHe1cqmmaKSdmc6d46LVlRF
+dk9Fm0izVd7lheLZK0Dr8CJGN+BbNWJpb3akyaCTrmUXE4WO7JSDQ+R9GrqNjQ/
BpzryFrhN3hzdWravmv0u8xP6x8GoHMax2qEcCyBZTPSLHUtIAhnRQGkb7kGKIv7
yYbqr6UFDUZpQEoh3wAN/iJ4+7XjlVuPPd09sc3IqKiykoPjDcOXC4H9e6aedMo1
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13754226680143629128981796875284553292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.freedca.mp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23636156924310172549563118795952240724535694737585579997194151341972125459367471422013732397878885985561020881554321302262701803726984153777078428557300054302272275113523844307458285850712352932870197729114117022618294767039933084353375556487909426116636769914901812216673076925087831074715415319304881745357200938298129643684556937451123922289904310302777639167225850792343237908744765543184019776048083015530451687562215066106106031603332445110138426444629873424971114313774745601677441554371388719725916170307205221900217567608476083167677754395909070379991003972333008452436441833159383337349405306017306120959373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee92f4945f2783b08be1d7c3120e7882b7a4db3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (903 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedca.mp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.completemarketer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.codevelopment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.1stsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.optsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.digitalmindsbpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.triadmultimedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.victoria.pm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.vicinity.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.blueboxglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.experiacreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.mythoslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.richardsonmarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huddle.isev.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.dadscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.webarchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.danugrahregency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.sixvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.adityaraj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.phoenixallsaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.matic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ntansa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.lavenderturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.ecetera.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp.texonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.eob.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.optech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.owl.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.beseentoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm.eikonikos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.crylim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.impressive.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.ivy.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.thinkingkaplearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.drenalin.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.easytek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.plannit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.pimicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.dayella.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000017065d64de50000040300473045022100d747c294d9f2cfa1425eeb4b0476b119db0742b45c7bee1a82aae54331b96e160220559ec361d0a5b06973e456898191652f0309fc45461dff73b9bf5a942f81b1600075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000017065d64e340000040300463044022026de6f7bc67093ccd5651ab67fde8b0c8f0696482c2893190a49a4ed8ced05ea022079d15131b88edf56b09e71e63ff0870e1b1d9b11e032383bd5049b5da61c7ca4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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