magnetbeta.deloitte.com

- Deloitte and Touche LLP -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 48:ed:ee:18:9b:38:cd:3b:0f:70:e5:12:3b:95:ce:31 was issued on by Symantec Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Deloitte and Touche LLP

Organization: Deloitte and Touche LLP
Organization unit: EA Platform Services
State / Province: Tennessee
Locality: Hermitage
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:ed:ee:18:9b:38:cd:3b:0f:70:e5:12:3b:95:ce:31
Serial Number (int): 96939819214987111979747272147760172593
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 2a:f0:f4:2a:28:a3:33:38:03:a3:99:c5:a4:4f:af:6c:0c:d7:63:5c
Fingerprint (sha256): 01:37:b8:e0:19:4f:29:ed:14:ec:c1:4d:88:3e:60:6c:11:bc:63:f8:ad:7a:de:f9:b5:c4:f8:08:70:1c:2c:a5

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate magnetbeta.deloitte.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magnetbeta.deloitte.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smagnetbeta.deloitte.com
magnetbeta.deloitte.com
bmagnetbeta.deloitte.com

Other certificates including the domain name deloitte.com

(limited to 100 certificates)
aboutdeloitteconnect.com
mbmc-mastercard.deloitte.com
USHYBRID.US.DELOITTE.COM
demoitrs.deloitte.com
stage-ipt.deloitte.com
towers.sm.us.deloitte.com
greenhousebeta.deloitte.com
initapp.deloitte.com
macentral.deloitte.com
*.restricted.prod.cortex.deloitte.com
api.bipaas.deloitte.com
erelocation.deloitte.com
umagnetconcierge.deloitte.com
ushdc8868n01.us.deloitte.com
public.deloitte.com
ssecure.deloitte.com
jobs2stage.deloitte.com
usap42.us.deloitte.com
girtracker-admin.deloitte.com
us.taxplatform.deloitte.com
dma-supercluster.us.deloitte.com
adsservice.deloitte.com
auth.dpass.us.deloitte.com
mac.us.deloitte.com
ts.sm.us.deloitte.com
*.dev2.cortex.deloitte.com
radia.deloitte.com
inviewrx.deloitte.com
tableaui.deloitte.com
myalerts.deloitte.com
tieout.deloitte.com
trueview3.deloitte.com
Defend.deloitte.com
anywhere.deloitte.co.uk
mcd.m.us.deloitte.com
iapi.files.symphony.deloitte.com
auditcontracts.deloitte.com
filetransfer9.deloitte.com
cts-redcloud-uat.us.deloitte.com
debttaxtool.deloitte.com
inresumeknowledgebase.deloitte.com
qmagnetx.deloitte.com
*.testing.testing.deloitte.com
taxplatform.deloitte.com
cp3consulting.deloitte.com
reveal.deloitte.com
futureoftax.deloitte.com
drp.us.deloitte.com
packages.deloitte.com
brainspacenonrsa.edsc.deloitte.com
nsdemo.deloitte.com
qacloud.csfadmin.cyber.deloitte.com
ustechlib.deloitte.com
sogcmms.deloitte.com
dumobile.deloitte.com
browserupdatecheck.deloitte.com
pdeme.deloitte.com
globalsonarqube.deloitte.com
hyderabadhttpstohttp.uk.deloitte.com
amgtraininglab1.us.deloitte.com
xapi.deloitte.com
go.asana.com
bcpctossp.hosting.deloitte.com
SLTCTaxPENx1.deloitte.com
*.deloitte.com
FreseniusK-1G.deloitte.com
strueview-analytics.deloitte.com
eve.deloitte.com
sscp.deloitte.com
www.deloitte.com
*.msao.deloitte.com
optix.deloitte.com
globaldthink.deloitte.com
labpages.braze.com
reveal.deloitte.com
solutionsdelivery.deloitte.com
magnetbeta.deloitte.com
stowerswayfinder.deloitte.com
snomcom.deloitte.com
demo.uta.deloitte.com
deloittediamondeameapp.deloitte.com
deloitteconnect.deloitte.com
discovery.deloitte.com
*.restricted.qa.cortex.deloitte.com
reviewengine.deloitte.com
gesservices.deloitte.com
fprp.gps.deloitte.com
map.sm.us.deloitte.com
dstartapi.deloitte.com
mcd.m.us.deloitte.com
dbx.deloitte.com
ipacs.composite.deloitte.com
sdra.deloitte.com
scribe.deloitte.com
socratesbot.deloitte.com
ddevlicense.deloittenet.deloitte.com
uswasf2q.deloitte.com
development.deloitte.com
smsascendae.deloitte.com
gtssip51.deloitte.com

Certificate

The complete raw certificate details for magnetbeta.deloitte.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZey4wVgMxI6y1BH0e7w
unijpr7MZjaMXhS/daiFolF2dgqgF3xi8tOlyW4MwFgX2BGO+qtwRf9IzVpUJ6IK
y74fC+XyCjhwOZHcKBU9L19PXa2XgWkyPSX4GZ6/el4WUlURIc0RKRlq9S9X5Sq8
K0FTAHjiuDevvFspug+Qm2kjr9K9L/6DYbTTp02yvg3Be03mw7+q87rMxZik2uLM
kVOYviEPqvZJTR5pm6snKOE3PsncpOLAW78BB1DBbQ0LbOaxgmZyPlhTsIB0+bYo
AefcjTKtJXKFDB6fpl/lqYt7YgUZffknPsVc5ANFy4LPZ7Rf72deZ8kCBrE2op5M
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96939819214987111979747272147760172593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hermitage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deloitte and Touche LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EA Platform Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'magnetbeta.deloitte.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22418985433754323208198205839993517631469045628463703608384824303941570677518765993472787166536334268183093659796589659009465156850107205439425788473191513568504743631287491574438890007791488937122962463534534552030725764915751963808012328028020144960790232658083873616419292132362479203469451439654520973299249770537417823538167008190316531135144393843648486513227308914255894194384702260014283879685475168664372415006363349397946198508048130583268907286555069690888239913525600431584330473840680036708989823523328720862736450734204009517259794302907721210530552217895335702895319690584600137749756928070341843897421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smagnetbeta.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnetbeta.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmagnetbeta.deloitte.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0071c8db15bb618e9764994090328c48977dce5392103f89f082e96dc25148e9061609ecc07dcfdd8840e28a7ea3ceef44e625a3b7f33fae74a92b19da8e545f3da2b5ab7c0760f6156b06603d6478763123498d6e61ed499b4fb119eaadde717701290431c8e20b2d1463ab55c54f210a613e64e6e3ea89d3851fdc665f9c89113f3383a8c9af90aa4db1e1827a8e75bff07978ff44c94d290ff48cafd631cbadecf11d15b6fe0d3434fc77db9e317e74099d182fbd69b33259404048c40b5fab337ef134a7ce392d60c7deee96f85e3764ae5d69f0aafe6b4f4542b059d16e3f79f580598bed8cdc7393c0cf42253113f484514da5b6cca423ed01a0a36c16b5