*.governikus.de

- Governikus GmbH & Co. KG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 4b:ae:ac:ab:aa:11:36:4b:94:10:86:1d:bf:3f:55:24 was issued on by D-Trust GmbH.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Company registration number: CSM031265814
Organization: Governikus GmbH & Co. KG
State / Province: Bremen
Locality: Bremen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:ae:ac:ab:aa:11:36:4b:94:10:86:1d:bf:3f:55:24
Serial Number (int): 100599061512354628312191649153349014820
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 20:4f:8d:5a:e7:bf:52:3d:92:f3:22:6f:01:e5:35:97:a4:ae:50:46
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 35:3e:94:b4:09:86:31:6f:f2:c8:f0:38:7b:3f:01:55:c4:a3:04:9b
Fingerprint (sha256): 0c:46:83:e9:06:18:8f:21:7a:70:21:c2:d7:49:cc:81:8f:40:90:b4:e9:7a:f1:53:e6:2e:6f:c1:1d:69:f3:63

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate *.governikus.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.governikus.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.governikus.de
*.governikus.de
governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for *.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bzT39pG78X+2tnZAwRc
NspedqvvHNvODguWo0lD9TpYw6IJlVzJj0wse9om/ZJJn9JmbpdSf/lv8iA879Y3
A2CgX+Pi1SFK+wLF03iF9BoMbTBP0eJ0TyW58Z4IMy5OmyYQJiq/au7g06Is+pp/
zv6H0IiijCfsZLwk8twILxZckYfCmGp2IhhtqGt3ERTy6GuP++o7SvBJX5M9zr2S
3AySjS2gl/IWc5cqxOTIqM7MQC1ipBzLCIILiF+wmWOI8vwSrq98tr4JSw6qqVNI
EKc0SMr7shbIZRQjWbXI4YeQJLWV6GAwoL8IiKYece4GCxjan2shLU6h3uKNETSK
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100599061512354628312191649153349014820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-10 17:41:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-13 17:41:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM031265814'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27991779774476611289172285128883408491176592651733574689247750036725009546508718349794967381815304462086669586905850936235134503853479334145860136012271763733461099847394357082216300037386523151252421876471424942189148465706581585639281921409331658212347190013377685363797288515594907062548826215171942308452429466335289553358903967269995542375677030207379448051160321089714184914116617370440815944943304920019667555400051112399450581985738026668663277557208604360622983921811903208516761827821344796701578401113881476428876339888627069269336231461427921053285958042655472307682520709447275150171230422020152175659601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1083 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1079 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governikus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							204f8d5ae7bf523d92f3226f01e53597a4ae5046
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007597cfe516c228aa7d93121d0112b5d61bcba9e5839a125df83a2613d4654b56c6bf8ee4626b056278f19bc9321af0d14d5416a295407448191dd091ac0461fe639ee811a9a0238cb316b874306017dcd7776f1b8ea58ecbdb704c1a008c43f6f86c8266734929813a9beb157ea99cf4e62aa25afea984276d3341417fa368142e3d30ab8626cc57619d09c953528db895b29fbc1a9eeb86333e98d53da95f062f5f81171a4c853247f3e0d90f1082ad1d0d213cd4f8e47fc06b4b69a4af09eecfb8f9007218d3ce8a89fc3c6eb9a4c5879680ef6c527647efe34d176a548cb09de69196d52c5a65669f686d2a74bd773d193111554bb0d8ebb0cbb0a257123d