www.pss.pitt.edu

- University of Pittsburgh -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number c7:35:ee:bf:ff:60:3c:05:50:ae:70:ae:3f:fa:ef:04 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of Pittsburgh

Organization: University of Pittsburgh
State / Province: Pennsylvania
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): c7:35:ee:bf:ff:60:3c:05:50:ae:70:ae:3f:fa:ef:04
Serial Number (int): 264796405319800331717381498649471282948
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a7:f1:44:03:b6:58:02:72:16:04:6c:50:73:4b:a2:14:1c:6d:04:ee
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 1a:a0:49:4e:7a:cf:f3:63:cd:ca:e9:60:54:d2:8f:7f:3c:cb:38:2e
Fingerprint (sha256): 01:90:e5:ed:d7:cf:c7:4b:b5:3d:b0:5c:93:f5:fe:7d:6f:f0:fc:64:d3:0d:2a:e7:92:3b:02:77:c3:92:4b:c9

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate www.pss.pitt.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pss.pitt.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pss.pitt.edu
pss.pitt.edu

Other certificates including the domain name pitt.edu

(limited to 100 certificates)
statuspage.io
apistatus.pitneybowes.com
online.orientation.pitt.edu
www.kidneycenter.pitt.edu
www.wiser.pitt.edu
my.pulmonarytrials.pitt.edu
www.ctmhr.pitt.edu
www.gnrp.pitt.edu
www.chronicle.pitt.edu
pitt-dr-vcweb.cssd.pitt.edu
statuspage.io
www.diabetesprevention.pitt.edu
statuspage.io
aro.pitt.edu
services.rods.pitt.edu
statuspage.io
coi.hs.pitt.edu
cutislaxa.hgen.pitt.edu
www.medstudentaffairs.pitt.edu
www.cwscholars.blog.pitt.edu
my.education.pitt.edu
ewi-vip-01.cssd.pitt.edu
www.scholarlyproject.medschool.pitt.edu
go.innovation.pitt.edu
pjephl.law.pitt.edu
jmla.pitt.edu
telerehab.pitt.edu
tincture.pharmacy.pitt.edu
valet.haa.pitt.edu
www.games4socialimpact.pitt.edu
www.pts.pitt.edu
www.phdl.pitt.edu
omed.pitt.edu
www.collision.pitt.edu
www.upgservices.pitt.edu
www.afcbt.pitt.edu
clip.pharmacy.pitt.edu
eval.medschool.pitt.edu
fsc-bbm-fe01qa.fis.pitt.edu
www.roc.pitt.edu
ewi-zweb-21.cssd.pitt.edu
www.iise.pitt.edu
navigator.medschool.pitt.edu
rms-pgaw-01.cssd.pitt.edu
5673649784750080-fe1.pantheonsite.io
*.tt.pitt.edu
dev-itbill.pitt.edu
cbordweb.upj.pitt.edu
www.rusfilm.pitt.edu
www.totalrewards.pitt.edu
statuspage.io
stage.fm.pitt.edu
www.pss.pitt.edu
ssoe-sp13-01.engr.pitt.edu
ewi-zweb-19.cssd.pitt.edu
ledger.pitt.edu
securedns1.planmygift.org
passport.pitt.edu
securedns1.planmygift.org
scherlock.lrdc.pitt.edu
www.aspire.pitt.edu
shrsft6029himb.shrs.pitt.edu
www.ucisportfolios.pitt.edu
anthro-age.pitt.edu
durrantlab.bio.pitt.edu
www.collision.pitt.edu
scalefunder.net
overdrive.library.pitt.edu
katz-sepm.univ.pitt.edu
www.healthyhomelaboratory.pitt.edu
ppr.pitt.edu
www.gso.cs.pitt.edu
www.law.pitt.edu
rd-r9-26-cons-1.net.pitt.edu
www.ois.pitt.edu
www.ncbrr.pitt.edu
www.connect.pitt.edu
stage.lamp.pitt.edu
www.alumnionline.pitt.edu
moira.pitt.edu
passport.pitt.edu
oam.pitt.edu
www.exhibit.library.pitt.edu
data.act.pitt.edu
www.cba.pitt.edu
stage-pittdc-01.univad.stage.pitt.edu
www.publichealth.pitt.edu
www.osp.pitt.edu
contacts.katz.pitt.edu
50.shrs.pitt.edu
chassis.hsrdc.pitt.edu
www.japanstudies.pitt.edu
www.students.pharmacy.pitt.edu
5673649784750080-fe1.pantheonsite.io
www.hopeteam.pitt.edu
www.pediatrics.pitt.edu
www.medfaculty.pitt.edu
statuspage.io
statuspage.io
www.medadmissions.pitt.edu

Certificate

The complete raw certificate details for www.pss.pitt.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyJIR7XRXdelMQAD2Mxm
P97QepymID5J3Ce6VFskLgrLnAji+Z/af78jmCh3PZajkmIKc39dHtJSxsn3xmxM
WU0cDX/1hDhbFXY20t+brNQN9oDI9KI1tElhylT5DbK6qRRasgPsWzXrc6gWVZ/Q
7HaIxp8ydlTkgwGEuzouZL2ga2k5ACJYZiO5COHWmp4c/WVDUX0EmQfDSrBm+M/o
bK/Knn3z/vaBVJIRcr7TF+alGAIM/qSP8AEY9CE9Vj2Mnq0Y3jUhggnNAjXKABLq
5mUOUgnaM9c8oTa/MIi2ZoSX6zPwNORDUMfuRky3p3bT0uRFw3skYQSWxAepXKc3
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264796405319800331717381498649471282948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pss.pitt.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25138327942243659037270702281215119203219933066551641957658549871390940279475228710446459406411238501857883216920352414345610880135436469978922852262617177297010140324233548269517546720596438666891486252912182439594123794332974335645706056206665273992006081075727691562409764929508834270969633911767939961443029792973750587324595576564624561626207511619101363912524722862294915037505039151215088953831497642793786139093866093580785421966871700257037183884081003006719688117433896048705436734368274514990691222517871139342491310886756344591573257828923276879923787091308126521144735660437353293883989842033012923381547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7f14403b658027216046c50734ba2141c6d04ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018c3b57894f00000403004830460221008f9016e42704d0b5527d1c84ba3573ae909e7cd0d977fa10d43bb8c708fbf4850221009432e0508f06a21911f37e90d051f48a5c374eed93b0e5ca0d8c0b547c2dc085007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018c3b57880a0000040300473045022100c2e731e9834eb6ed754b1818bb9b32bf1d0c026569a7bd5e5194154d126ba3720220230d00456e7b02992cee7ef800a7738f4958c5557f0ad908c527b55b6152a4ec0077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018c3b5788f40000040300483046022100854250ea507144bd4edab7fc772e9bbe3f28fac9dacb1cee26e41a62f7f23e0002210093586cda9b513b6b5b2c62a12e4b2281959d1dd6f224d3695bcbe780fcd6e2f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pss.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pss.pitt.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		0057cb161f4780d926c88271c42881a519ffa466cf82a052ebad9d1fdc36e017af5e41b9db322752aeabe4c1ba501835290d95cac641ed37aa1ef20b622a1564b759fa3d74f9b2ebc4fb23f13f8b000e839310eb28086d0d336e169d50fa7d2d4f0380efef75e9b79ac47f4628c2f4b2e46bffb464774453aec2b53b90f4dbc51eb2ece8609e45485fb96b83de8401a0ed95259712c28e14a0df750415d01a186652122bb5d01ad5ef9c8c4d0146350da51a1343416fb4e951fb0a68fc34a56ef212b936298d0d167c1f01f00271c232774d2b8228b7b555cd79d2af543a53108c4d1e65ecabd72a6785fc85ac240c7f61bda43d66755be5214b9a8c3928f6a31cfb5f2d3c55aafde372283a504c35ed9b8f1bd36dd20d6921215bef5d435b95ee92da2fd44562a9b44da41acada37359c433ec889356b38d13637969bb54965fe0dd259b11c3479a4c21b281c8a2b287030fb308c1b99c4cf3db26707d6944882a4b641067e63385f3937a3750d6ad9643fdd0e3a37a25b272174d665563477ee