ca-oltf-services-ps.us.oracle.com

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:5b:f6:63:1f:bd:a6:ee:33:6f:ff:66:71:ae:ce:51 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Oracle MISC-LOB US
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:f6:63:1f:bd:a6:ee:33:6f:ff:66:71:ae:ce:51
Serial Number (int): 5794408323440230620141785974022524497
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ec:a0:d8:34:bf:f3:a8:52:75:eb:53:5c:1e:b9:ac:c5:fa:46:b2:28
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 65:f3:8c:b2:ff:75:ca:cc:73:00:72:5c:ad:3d:0e:5f:a6:57:1a:2e
Fingerprint (sha256): 00:ed:68:50:26:6d:e3:9c:9e:6e:50:8c:8e:8f:54:7b:59:34:4f:5d:fa:97:69:35:5e:b0:cc:55:a1:79:c8:e6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ca-oltf-services-ps.us.oracle.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ca-oltf-services-ps.us.oracle.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ca-oltf-services-ps.us.oracle.com

Other certificates including the domain name oracle.com

(limited to 100 certificates)
dockerhub-eloqua.us.oracle.com
uingv4001.us.oracle.com
wfivm01803.us.oracle.com
monacotest.us.oracle.com
cdpap.oracle.com
msp00adi.us.oracle.com
brmdc-ise-mg-3.aaa.oracle.com
aqaoraapp7.us.oracle.com
kkm00edj.in.oracle.com
den01xjs.us.oracle.com
www-stage.oracle.com
academy-stage.oraclecorp.com
hq-bps-staging-2.us.oracle.com
test.oracle.com
*.db.dc2.c9qaga.us.oracle.com
brmdc04-102-ja2500-1-vip.us.oracle.com
unifiermobile.in.oracle.com
wfdmzvm00629.us.oracle.com
opnec-vpn-us.oracle.com
slc17jyk.us.oracle.com
stg-cloud.oracle.com
championsnews.oracle.com
desktop-alt.osc.oracle.com
tyo-ips-2.jp.oracle.com
ilearningtest.oracle.com
adc-ips-11.us.oracle.com
appwfdmzvm00536.us.oracle.com
whq-ips-1.us.oracle.com
den02pil.us.oracle.com
lb-iad-peonetworking2-gxp-prod.oracle.com
llg00cej.uk.oracle.com
dev-project-log.us.oracle.com
leochat.us.oracle.com
download-secure.oracle.com
aqaoraapp16.us.oracle.com
gmp-dev.oraclecorp.com
pout.no.oracle.com
slc05cty.us.oracle.com
osnstaging-prod.oracle.com
msp52859.us.oracle.com
sgdsca.osc.oracle.com
den00sen.us.oracle.com
brmepoapp02.us.oracle.com
adcfodldap02.oracle.com
utiltw.tw.oracle.com
retailfortify.us.oracle.com
psfdr-prod11g.us.oracle.com
oecet.oracle.com
busgf1203.us.oracle.com
hidmp0761.us.oracle.com
ca-oltf-services-ps.us.oracle.com
den02mbg.us.oracle.com
gmp-dev.oraclecorp.com
utilhk.hk.oracle.com
llg-q2-ips-2.llg.oracle.com
auc02mgr.us.oracle.com
rodgwf02.oracle.com
ngcc-sit-integration.oracle.com
www-legacy-stage.oracle.com
aolesc34.us.oracle.com
odc-addthis-prod-01.oracle.com
jpidgv0001.jp.oracle.com
rws3270880.us.oracle.com
busgl0910.us.oracle.com
jiuhua.cn.oracle.com
*.us1.cloud.oracle.com
bma.us.oracle.com
den02azy.us.oracle.com
hdssimphony.uk.oracle.com
jpsh-expc-2b.jp.oracle.com
salescentral-dev.oraclecorp.com
slc01bgk.us.oracle.com
docs-uat2.us.oracle.com
den00lkj.us.oracle.com
msp00bcg.us.oracle.com
epdc01odgwe02.oracle.com
omm-stage.us.oracle.com
mandaprimavera.oraclecorp.com
dnovmlx44.us.oracle.com
pqa-stage.us.oracle.com
aserp2010.oracle.com
osnstaging.oracle.com
retriever.us.oracle.com
ospct.oracle.com
kkm00ckx.in.oracle.com
slc04yqt.us.oracle.com
mydesktop-mig.oraclecorp.com
championsnews.oracle.com
apex-ext-stg.appoci.oracle.com
rgbu-mfpeecs-qaedc01ab-ext.us.oracle.com
wfdmzvm00555.us.oracle.com
slc10akr.us.oracle.com
lb-drc-nonprod-int.oracle.com
utilus.us.oracle.com
den00gyi.us.oracle.com
userp2040c.us.oracle.com
slc040oodstor17.us.oracle.com
rws3270872.us.oracle.com
*.db.dc2.c9qaga.us.oracle.com
jdash.se.oracle.com

Certificate

The complete raw certificate details for ca-oltf-services-ps.us.oracle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5794408323440230620141785974022524497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle MISC-LOB US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ca-oltf-services-ps.us.oracle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 676149517308882263987883766796831772630925811129332045654526339288905615095259005620678507194891432927222203728474464276190410276108810804089745561354776867965087498029057323258799113831825445258944869314775958705108699988012971470837859265713223940582449496158898982061986520379250840556728615476459096656725274955572473848069691301628533945337086510730424177706316087023013624732440199893595050703512613331591773147740515422289004910468658247887554161471609149083337317258450133034187526198660615905375019261769498683930918925515251582070663328597490658514585612257368096394175253345414674360114560890867830905704373312972645545410052347652805629421880262476169652705923521531563411986182925929951833920655219906530914665577091411276280394622841152808557905481406753701697699713639279097009731341839592038717094880821667812673841892310783214025369457684356090667002551148986587829846638181928581405664085382748152744902167519672564624605572806088823562891296869690936835972579255276954256505252601974040378756053019794404671623521404067826608652203639118946257120284976327062163774251354831057877776163333085552063814456451028725135564836823313630087949435741235484232674654743000467149275271202560235240552441815349767221813718817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eca0d834bff3a85275eb535c1eb9acc5fa46b228
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-oltf-services-ps.us.oracle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f8951f003471ed447ee13b72c56096ef5f3b64864dee23c4441184732039436722729d8537ca208b86f62b556c8ceeec4561eaf61da7b37aed8e34c2a7e41ceaff576fda02dc2f951e74737b4abd9acabc40fd86ce590c2cef85d89e79c4dc6e5fea14cfeac2bfd5979b7aae53c51b065d2257c1c8a1a5c74c9405663fefda4ddd123ec90cdbe9ee0ad9bf5c43d3b21dd1f24007c097cfa4d2b50ccfc4ace327696db7350c81b31ee4ea48b4c4da1167c302234eee085ec8ce9a15861b72edafd472b5ec1a1227e0bdfc8adab9ffb2891e180ff187413435bdecf963caaa3387a27acd94d68b5f648e51e352cf7281f38b1b3eef38cd5328b9cc30af6fc476d