DV SSL/TLS Certificate for silentpanelassistent.geberit.ch

Certificate is witin its validity period

Issued by DigiCert, Inc. (GeoTrust Global TLS RSA4096 SHA256 2022 CA1)

About the silentpanelassistent.geberit.ch DV SSL/TLS Certificate

This certificate with serial number 0d:64:f3:af:55:e8:43:5a:f4:40:6d:40:9e:26:33:f8 for silentpanelassistent.geberit.ch was issued on by DigiCert, Inc..

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for silentpanelassistent.geberit.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0d:64:f3:af:55:e8:43:5a:f4:40:6d:40:9e:26:33:f8
Serial Number (int): 17804136148106531164101070647110022136
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 67:7c:d6:38:e3:e1:69:d9:99:b3:0f:13:a6:b9:dd:82:b4:87:72:d0
Authority Key Identifier: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (SHA-1): 89:98:34:4a:b6:af:41:18:ca:0e:02:f2:05:35:11:17:0d:e7:ae:55
Fingerprint (SHA-256): b4:06:d7:4e:68:01:83:fd:8d:a8:26:ec:5c:e8:27:53:d2:57:76:66:ee:52:14:26:96:a0:d7:09:e9:e4:1a:4f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate silentpanelassistent.geberit.ch
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for silentpanelassistent.geberit.ch

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

silentpanelassistent.geberit.ch

X.509 Certificate

The complete raw X.509 certificate details for silentpanelassistent.geberit.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrjCCBZagAwIBAgIQDWTzr1XoQ1r0QG1AniYz+DANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjUwMzEzMDAwMDAwWhcNMjUwOTEwMjM1OTU5WjAqMSgwJgYDVQQDEx9zaWxlbnRw
YW5lbGFzc2lzdGVudC5nZWJlcml0LmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5oiomVY5Ui97TVCBhjwac3LvfIYa/ffwbbRxmP2tZRACUCTISVo8
ShYSE3vJEzeBd8N+gLs4+nzkSGvs1PRCGzf+ztEoeMUamOnvQPGhw1jAk9brtR6h
EwUKc9omH2V0qaK0NWiEcAZTYYvUcCQbTy/G76N33m/UCIukm9rnrS42QpWlXw83
76tIQN/79+Qh9BHpG7OR5e2hM/uvs6zh0NMhZdnzF6Mn9b5yrcGz36N7an8ayfY0
lGGD5tA1VwPf8T61jBnk6e8AgsInYWJtbi8RV3c98aO3s0aBP1X/7rduRTVxeemX
9JoE6X64hFp5gXzzROApkILp0ABw0wKbDQIDAQABo4IDnDCCA5gwHwYDVR0jBBgw
FoAUpbTW6zbE52um38RkCwEqIAS4ZiMwHQYDVR0OBBYEFGd81jjj4WnZmbMPE6a5
3YK0h3LQMCoGA1UdEQQjMCGCH3NpbGVudHBhbmVsYXNzaXN0ZW50LmdlYmVyaXQu
Y2gwPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3
dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2Ny
bDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw
MjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1
c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwgYcGCCsGAQUFBwEB
BHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsG
AQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9i
YWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwDAYDVR0TAQH/BAIwADCCAX8G
CisGAQQB1nkCBAIEggFvBIIBawFpAHYA3dzKNJXX4RYF55Uy+sef+D0cUN/bADoU
EnYKLKy7yCoAAAGVkC1ragAABAMARzBFAiEA8JSrsywRiw3BtJTBVbsdZ+6Xy/Od
Jfbp3dhH1V1QA1YCIDHNv3hQ4NyxMfl5re15Wr6uzguodR+82M39DhD+C6R3AHYA
7TxL1ugGwqSiAFfbyyTiOAHfUS/txIbFcA8g3bc+P+AAAAGVkC1rZQAABAMARzBF
AiEAkNszHTayYZRiPNXv7Ja5zlTy1gN9IP9rUIuKEn6ZV5ECIFcUi2KFbl2mRCL2
ZJ1PadaDH8+dL38yxUxSlvFUYDBwAHcA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6
hzId/R43jlAAAAGVkC1rfgAABAMASDBGAiEAq8m3enMKeHhDSpbrWNkKJFLkdoPc
DmRCrOa5hICppgYCIQCq2cltJzKd4Ydjk286J6euIw2/VTYKsbvPxlkj6ltQnTAN
BgkqhkiG9w0BAQsFAAOCAgEAqR8rnqhPHAKgQZrzYfe3hGyWixa45zYTOw/ajFnj
UyEYFMonNq3b/kgjbQE5OTIi4UC2vAeQEN1OgBQ3+JJBR88TBmjt/XyB106dy50P
Y4AP7P8I+jpPb5XWqGTh+J7ACImd/BIwCwC8W3Zabt2qC//XHvkPEk4+MZlamFkn
AfTWYNJpeQ9f2bxvKJGRVexSP7cn+HyDMQDs8w1+qXIv7ywvtBoI3LxAv3RT3RfO
Em7lyNzDHvQt9vz88f7WX5BcQcK8sYcwiQ7PsCEU6wqsNp5Bw6/PKG2aCEDuvPAH
gvSuFmMhffk/1dOuseJh5/xRn/Yq+0E/nOw4P1Sj5OvAs+0k6594gdSwCOrXS3QY
yuASgbFwEvp9J7VraYEf+EGF3l6kc0gDXtnaJozHLT3fR1zWLMxVaCe740EduPAM
7lnR6+AUAMUpQG0S1GTrwtJBD9eZFNoCuyq9Ad+a7GPIYf7ee+4xX739CZR5odYU
obwQVrGYvFwZ4p95uToKXJ/S5z6lwj5kv4LTZHYFbCV/hcasHUo6BtZxwoYS6FDj
BEFY3RLxITByfwo8QV0KKqXdKdFiEjoguW8Fdne4AY/9AEWp9Nd6i9IwiCEu9ul5
6iKGRif63y+pPg/7rDCLOrxqcWrpV7ErcY0M5q1hBaJ92lU3A2rLSQb/SVKa7eBc
LMM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oiomVY5Ui97TVCBhjwa
c3LvfIYa/ffwbbRxmP2tZRACUCTISVo8ShYSE3vJEzeBd8N+gLs4+nzkSGvs1PRC
Gzf+ztEoeMUamOnvQPGhw1jAk9brtR6hEwUKc9omH2V0qaK0NWiEcAZTYYvUcCQb
Ty/G76N33m/UCIukm9rnrS42QpWlXw8376tIQN/79+Qh9BHpG7OR5e2hM/uvs6zh
0NMhZdnzF6Mn9b5yrcGz36N7an8ayfY0lGGD5tA1VwPf8T61jBnk6e8AgsInYWJt
bi8RV3c98aO3s0aBP1X/7rduRTVxeemX9JoE6X64hFp5gXzzROApkILp0ABw0wKb
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17804136148106531164101070647110022136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'silentpanelassistent.geberit.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29102199004408644382427230073018481633754307416275659750838550316922455575638665249276443554165972776433275301114392893628562015220753874133328195588485976969386520239516351006570762860211795096124920968361658099213874766551868583513515468306296297927470438769286024153842642961464820148750495905969070813563396906092233453013820852881767689008449750004273882489094193784650006647504940876361045689171803426397177162830861753144569238008113768550114989678376806525376989831662493188313200690685674677228542431708741824752840461380891879669488852704364565631470209841368549448018329538746234023059322988334122740652813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							677cd638e3e169d999b30f13a6b9dd82b48772d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silentpanelassistent.geberit.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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