forum.lifebit.ai

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:8f:c1:48:40:29:1e:c6:1f:d1:25:e6:d6:09:6a:53:c2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.lifebit.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:8f:c1:48:40:29:1e:c6:1f:d1:25:e6:d6:09:6a:53:c2
Serial Number (int): 323799614123920238897852737559914829468610
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:e0:2a:a7:56:c1:f1:1a:62:59:23:43:ee:96:c3:08:81:83:cb:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:8d:9a:60:6c:69:60:66:e7:51:c1:0e:aa:36:79:32:95:71:81:8a
Fingerprint (sha256): f8:e6:62:40:2c:4d:82:4b:16:76:fb:e1:88:01:81:0c:14:cc:74:58:d1:be:dd:79:85:48:b5:fd:e5:e0:ad:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate forum.lifebit.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.lifebit.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.lifebit.ai

Other certificates including the domain name lifebit.ai

(limited to 100 certificates)
forum.lifebit.ai
test-endy.saasquatch.app
*.sdlc-test.lifebit.ai
opendata.lifebit.ai
www.onpageideas.com
opendata.lifebit.ai
zabacus.org
www.excellfeeders.com
forum.lifebit.ai
elmoradillo.com.ar
opendata.lifebit.ai
tls.automattic.com
lifebit.ai
opendata.lifebit.ai
forum.lifebit.ai
tecto.app
derneuenovak.at
opendata.lifebit.ai
www.arches.app
ssrdigitaldisplays.com
travelgallery.in
www.lifebit.ai
test-endy.saasquatch.app
edubarbieri.com.br
www.upform.io
www.synsho.com
lifebit.ai
tls.automattic.com
alisdairmacleod.com
opendata.lifebit.ai
blog.lifebit.ai
sspuat.console.aigens.com
dylankamauoha.com
deploit.lifebit.ai
lifebit.ai
*.lifebit.ai
www.cedros.pe
forum.lifebit.ai
*.lifebit.ai
lifebit.ai
*.sdlc.lifebit.ai
*.lifebit.ai
*.lifebit.ai
tls.automattic.com
*.lifebit.ai
*.lifebit.ai
deploit.lifebit.ai
forum.lifebit.ai
tshirts.cortlan.co
silconp.com.br
admin.teetra.com
tls.automattic.com
lifebit.ai
www.sysdev.co.za
opendata.lifebit.ai
*.lifebit.ai
cloudos.dev.internal-lifebit.lifebit.ai
www.jackscherlag.com
forum.lifebit.ai
prmibr.com
*.lifebit.ai
adamscourierservices.com
diskover.app
www.chakkumkodefoods.com
tls.automattic.com
lbfrontiers.lifebit.ai
fromthisdayforth.ie
tls.automattic.com
lifebit.ai
lifebit.ai
julioromano.dev
lifebit.ai
admin.levelup-livetransfers.com
www.tweetsweep.app
*.lifebit.ai
floof.rodeo
buraqautomate.pk
test.blog.lifebit.ai
alisdairmacleod.com
*.lifebit.ai
tls.automattic.com
www.djolonga.com
*.lifebit.ai
beanstalk.simplesoft.co.nz
www.lifebit.ai
www.oversight.ai
lifebit.ai
www.dunware.com
lifebit.ai
lifebit.ai
forum.lifebit.ai
www.copiedapp.com
tls.automattic.com
lbfrontiers.lifebit.ai
tls.automattic.com
www.buk.app
*.lifebit.ai
www.lifebit.ai
www.lifebit.ai
selektor.myemmacloud.com

Certificate

The complete raw certificate details for forum.lifebit.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISA7ePwUhAKR7GH9El5tYJalPCMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTMyMzE5MTdaFw0y
MDA2MTEyMzE5MTdaMBsxGTAXBgNVBAMTEGZvcnVtLmxpZmViaXQuYWkwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC+sHuArHrbzA9VEwGoG53NX+neNSY+
Eu4CwpGGzCL65lVNI8O4PkUtWL3Ix44RX68AQT3ezfNKowxhGfrwawXwt7TiJrpo
AOTC8kJ+RDru1wCTfLa/cXR+SnbvJQvurE9Fh2eHwPBFyj8MviyvchgbQ6M06Klu
HSdVGBQs5xcETQgtbqNaJz5CmQyO9wEzL6axf1NgO/7gEqb9rY5mkFkMIHcVQ3nh
UJu6452sWNaGc0giXPHatPogd2u6T+UrbzCYFUGOfU7kaSWLWNZYODpszwyFRHvY
Ku3Bq56bYRyT/Jn/99dM00YC7FJLelHs6aKUUvsbyjERG+t2T2fJyluhfrvqU4KV
ZfQWIWe4eUD/0TTig2RPNaIsLE3KrXrAqtfckqDEgVscysJEZk4os1yVL28LE5GC
LJ11YyZ6YGkcVwYHucDDishXzx96KY8Pej8KB02NRihnbXPdTupGaWlU05BY15TI
ywbF3hxaawiti290e764KD8V9+iJu7MsnKvKPkbQQEMnt+kFa29PDPE89FzbancT
x2hNMjZX4AlNJytaiHIQs4aReAml13RALNYyU2luhb23Zmn9yk8G5CMbAsz3pkND
8MmpVwtBzoKFEDhUGfqvb2CdGhK2rbJmOmNy8DK5TMchRiSSEmODzCw+i4DyUDlV
wV0pEX07u3DtOwIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTL
4CqnVsHxGmJZI0PulsMIgYPLwDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGZvcnVtLmxpZmViaXQu
YWkwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQC
BIH3BIH0APIAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXDW
aM4fAAAEAwBIMEYCIQCJlNRTy47qkGViJt6H39JMI+n004XxVW5z0tasYx1pRQIh
ALQPabvddCYj06bhN2V48ejCQN5eBTKqJ9e72P5qozEuAHcAB7dcG+V9aP/xsMYd
IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFw1mjORQAABAMASDBGAiEA4ZfT2vukf7+8
6NjlNYe5cRzi9dCXyBX4thvlH/LlO7YCIQDwpQ4AYtm92ZklIOvEEpF9oRQv4t8V
7phnfrlYUeouIzANBgkqhkiG9w0BAQsFAAOCAQEAdeKQTSEMUftUr8RKftqM1V52
faPCq1rw7CFyaI6hbTbXQ1n2jnwTixLR0Zpl/5kdIqJXQMIY0cb50cpSTzsQXYc9
LmDbiax42VqEoBXde0Qj4pctj944erBcxjWAqrVPVd99PxJm//EgzxHqKWEFgBLP
E9PkBfF3oc0Ut3CZV5VbbxWs+lAMgXzo0siVWIYu3c7HI8Gid3iAP1A2eR1BUC1a
QTHTxz2Gi5WhmWvuCWEeWM5/UsyYzhVVRcmWFXvIvJxwE4cObfYsQcdU/dSeyQeR
a5BMQD9P+LCD6rrV3jdPeBwtz7b4umTANeaClXG2IaDbUHgo/0qtwhuK/EXimA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323799614123920238897852737559914829468610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 23:19:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 23:19:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.lifebit.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777944816312313871990325484229549621130355578720076403025934071927558673225190287042868862156961168546825361748544147273096014801462211618052155651534938758567788278909583310013897227626914555197892767158971098297237627653881746778012703002051015995036482571831106934829393290111871446584866753696124344933866418328554644792520461923075240743306332690826783694425994649675074385897151571001130346196950692871578456605766254837089962757055935191942685183074174008947716130643466522576982025727093701597331558121198363626269748227065686469685403374793499457230827960854498984786366268759617383675561218880760631700906251133967500649994621468503331403698894614073960684426480213194042408304087751973290882293233844069955260300816872056626615102239030103547086942418768314146777048797681251543954449919126099056874661375434960426420088267434324344456383205338912725822853975984776055939784565746100364857471177816891029248239026674364722833330169073832247200902792686722941312906648931107375807451847353433819882622809964641286415278176614477118616224066742424649526917986844849210133445958934149454067153231630233795215666891474251457371044067801599783129638661732244777984410676718420599841156305797410367933407292259274314807535267131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbe02aa756c1f11a62592343ee96c3088183cbc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.lifebit.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170d668ce1f00000403004830460221008994d453cb8eea90656226de87dfd24c23e9f4d385f1556e73d2d6ac631d6945022100b40f69bbdd742623d3a6e1376578f1e8c240de5e0532aa27d7bbd8fe6aa3312e00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170d668ce450000040300483046022100e197d3dafba47fbfbce8d8e53587b9711ce2f5d097c815f8b61be51ff2e53bb6022100f0a50e0062d9bdd9992520ebc412917da1142fe2df15ee98677eb95851ea2e23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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