flrt.bazl.admin.ch

- Bundesamt für Informatik und Telekommunikation BIT -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 6b:a8:32:d7:7a:5f:7f:22:7b:42:06:3b:b6:e1:99:45:82:af:46:d3 was issued on by QuoVadis Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bundesamt für Informatik und Telekommunikation BIT

Organization: Bundesamt für Informatik und Telekommunikation BIT
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 6b:a8:32:d7:7a:5f:7f:22:7b:42:06:3b:b6:e1:99:45:82:af:46:d3
Serial Number (int): 614612966609171112080070580528665534608878552787
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 9f:19:13:22:c8:19:c8:08:9a:7b:78:5b:b7:4e:1b:b2:eb:19:6b:1d
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): a3:c7:40:24:ed:69:17:8c:06:28:53:83:1b:63:8c:84:98:a1:6a:d5
Fingerprint (sha256): 01:92:6a:e8:64:37:63:69:33:d9:c2:92:60:70:09:9d:78:6c:8f:4e:c3:5a:aa:a0:e0:0a:37:28:bd:08:d6:78

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate flrt.bazl.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flrt.bazl.admin.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flrt.bazl.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for flrt.bazl.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 614612966609171112080070580528665534608878552787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 12:56:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 12:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt für Informatik und Telekommunikation BIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'flrt.bazl.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672397436670363185225374771982945274732700133380758936262561324578752270314538955734891211362730316261282480725467178901814881386253765109693505970613706049669072444208570999684762475625546827897035658323094407576240190977837321842132362358754201824490578935963359644399771650719359242660624131269358827923699456750107277358864770313812665757690790718903958096683315655205241153680489440746311677799733902876360236333292202195150330588717866792483719128653571226318264686356344315977720764797477019485969779660872002522428424361943696977508914855333954945604174589926712333816613102502041214431699159944791937084109870512225860080112698103247681659120120375756873345953861476942195378703526806173677382153032289208433319179341240906307422100061358459263574772960226551257741372663789878826189021632713506555290903272529636105893782219341371939581296517150787665930458454504798036811598491165150835533648343552537319324736398626047474956124689070330470745360593552633345852043560563762479155366398420207659747970314334191284869291564737546972258027993917714518356537866352265963093106566184895569244718816778946682741262456615586052781159395973642571932677501753952234252408330723153234777796161000559681615140447177835712252472719871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flrt.bazl.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f191322c819c8089a7b785bb74e1bb2eb196b1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0014d8288570c4db880004a1a981e908eb361e083a34a58d2bf2af8eac353a1571cf5be4366e8fddb0ccdd43ec37671e5efb9f6c06e4f47b98f6d0ba02199f16172b819755d0a7bb42559af8acb91774ed9c58b67ee37247437df2396a4b3ee78b54127eaee44c9e3afbe64f1160103c2081dc45f7547ab74ad43d6ac923f81a23e4a3e5717ac94be6e147db54650f76e946c53d56dbaf7a0ec37a1198aec7149c3fe537d6e511c31216a8ac4950b75ea5f3a79480b80ea1061239c98891861eca32a8da2f2903699379b20b64f2efbc6895936f315a65dd564545b88b830485678be2be4144384fe885471019593d96f534e172f4d363b564ceb190327ebbe3ac25d9a8e3d487611d2814c92305127a925fb6f3e1e5525b11b135b385dfc0dfe1efdc18d1a9c852de6db2ca9bcd528a2d1d8ffe0199f3a09ccffdb6ce7b97b329cc84c9fd6d9e3505c93fad45848e19c2a65033380862bf199eabcc96b44dc1998d9b0a352a96a5a4d2ae9b0e3ed56e7e959d9bc243f83c3a59606545ce7c92c5b592f85fe1024f2606feaa862633eb3651f1851a68f0a09d00dd7f02c4648ea5f46d61a3cb6db397380557c5d6d08add30ba4ced6de088029f74be5997ce0baed4021d31c3e661500286eb54b016794a41df3e2ac6c269f478f15870dbaa36cb433cd32bfb986c9f8f9756556ba499877de1eb6e0b81f03ad3ac66a8f14216e9