ftp-secure.sbb.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 25:2d:be:7b:8a:20:ca:0c:fe:b3:87:8c:42:e2:97:9e:e6:23:0d:59 was issued on by SwissSign AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ftp-secure.sbb.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 25:2d:be:7b:8a:20:ca:0c:fe:b3:87:8c:42:e2:97:9e:e6:23:0d:59
Serial Number (int): 212252785427077821154384918413384295493990026585
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: c0:2a:71:98:0b:af:9d:e4:53:b5:3e:d7:10:c0:c4:3e:4b:ef:23:93
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): d2:ef:8e:8d:ac:cf:13:24:68:fb:3c:52:91:4d:8f:e4:0c:2e:c9:14
Fingerprint (sha256): 01:ab:b0:76:ec:14:18:1c:ac:20:08:10:b8:04:53:1b:2f:60:8f:f5:25:d4:85:ff:fb:a2:22:36:8d:28:a4:21

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate ftp-secure.sbb.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ftp-secure.sbb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sftpi-intern.sbb.ch
ftp-secure.sbb.ch
ftps.sbb.ch
ftpi-secure.sbb.ch
sftp-intern.sbb.ch
ftps-intern.sbb.ch

Other certificates including the domain name sbb.ch

(limited to 100 certificates)
i88507.sbb.ch
tel.sbb.ch
esq.sbb.ch
etcsst.sbb.ch
webservice.zvs.b2b.sbb.ch
rpn.sbb.ch
edgemail.sbb.ch
besichtigunghaegendorf.event.sbb.ch
hrstrategieanlass2022.event.sbb.ch
bim-industry-days.event.sbb.ch
origin.int-www.sbb.ch
ausbau-bahnhof-lenzburg.event.sbb.ch
ipv.sbb.ch
auth.sbb.ch
f2test.sbb.ch
qt1-ssl-client.sbb.ch
fs.sbb.ch
viewer.mud.sbb.ch
mobileprod.sbb.ch
austausch-buspartner.event.sbb.ch
polarion-coordinator-t.sbb.ch
secure05.stage.lithium.com
186e-d5751.event.sbb.ch
gtech-modelviewer.sbb.ch
clicks.freizeit.sbb.ch
previewserver.sbb.ch
austausch-buspartner.event.sbb.ch
oauthtester-ws.sbb.ch
smo.test.single.sbb.ch
kundenstimme.sbb.ch
fntcmd-prod.sbb.ch
hi1-ssl-client.sbb.ch
aditest3.sbb.ch
carbon.sbb.ch
dcs.info.sbb.ch
gewinnen.sbb.ch
elazt.sbb.ch
railbuyer.sbb.ch
tip.sbb.ch
bpoelscom501.sbb.ch
lea.sbb.ch
ftp-secure.sbb.ch
koserv.sbb.ch
apu-p-paq.sbb.ch
vmits04-t.cdc-dmz.sbb.ch
lira.sbb.ch
test1.event.sbb.ch
secure01.lithium.com
ictsca.sbb.ch
miku-ws.sbb.ch
events.sbb.ch
secure05.stage.lithium.com
biv-zvl-25042022.event.sbb.ch
int-infoportal.sbb.ch
secure01.lithium.com
kmsp.sbb.ch
f5int.sbb.ch
dim.sbb.ch
dms-int16.sbb.ch
apaint-swc2-t01.sbb.ch
api.solace01t.otc-test.sbb.ch
186e-d5751.event.sbb.ch
rsdpext.sbb.ch
polarion-coordinator.sbb.ch
carflt-otc2-p01.sbb.ch
besichtigungbahntechnikhaegendorf.event.sbb.ch
journey-maps-tiles.geocdn.sbb.ch
pv.mailing.railaway.ch
data.sbb.ch
sapdms-test.sbb.ch
railbuyer.sbb.ch
*.fpl-nonprod.aws.sbb.ch
4765-ec38.event.sbb.ch
fntcmd-prod.sbb.ch
sbbstimme.sbb.ch
nova-koserv-ws.sbb.ch
lscmeeting.event.sbb.ch
sso-inactive.sbb.ch
orbita.sbb.ch
microtrategy-day.event.sbb.ch
rgs-appl-prod-de.sbb.ch
lvsschiene.sbb.ch
mediacenter.sbb.ch
code-t.sbb.ch
klesy.sbb.ch
depotsystem.sbb.ch
company.sbb.ch
risportal.sbb.ch
secure01.lithium.com
f1.sbb.ch
vmits06.cdc-dmz.sbb.ch
trace-d.sbb.ch
f1test.sbb.ch
secretescapes.sbb.ch
trace-t.sbb.ch
company.sbb.ch
lisaint.sbb.ch
tip2.sbb.ch
*.app.sbb.ch
festtagskarte.sbb.ch

Certificate

The complete raw certificate details for ftp-secure.sbb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnASjNTU0f7Ovj7gPe9mq
AlebXw2AMCL91WschKw9OoWh3Pkmih9gqKAj31r12ZyB35yaSIP0OqYvK2VLKizL
iV3xy4vc5MFNoshrFPC3uAB0bEPnZ1YiUOudNBQatzy0jf2jPISCG+LKNg4D1EWu
qdNIiMbHif3Naq+++6qOXelRGWJOHQZhdc4splI8Zj7P4VrLPraB8diQoGTeMLrY
IpvLxHqgIp+YHylWnhuTvjuVpY7/tZI3Hs0qXk4glbKkrymUnOVa4uu3ibd9e/yy
46V5HHJ/sb2JvTSwItkxkl8Wfu/7mVLXneNvm3bQpOOMSw5the2KfOrXAWpIsoMR
br8aaz1OEjHAeuS+G7fqyzfscFxRl+UJXvNxyeZtFGmwSbHHImGIlbQHD52qSYib
PWHxDmxvT0TtzqK2fIuCtVsevhiSgtAa2J9uQidVlbBukZyOwxnKvDReKuJvQ8yn
xnW/2t4tYTGcNLC5LRwEZOV+RC+G6+cZnZJW+F9Ds/eLKlmIHswACgAyiCAq9uOC
gBRiCBdzwEsj+i5jFbCEQIg/17DABSM3j2w6Zjp9oyqvHaBWgvTZHzfgClOXPgfS
P2DnDXozJX/cO8F6OCC/BEHAqND4LJ3NYJFPbnUk+iCqOPKr9TTewXw6MZzujbcd
nJwgsn++DnKgO6XKx7EJuUcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 212252785427077821154384918413384295493990026585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 09:38:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-23 09:38:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ftp-secure.sbb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636498378807834594303369322674192404313555678841777801066685005572389798230325706512539254131274550679560615312992539383415714443662731951588275489858979180559410751999016173375403594873032511757893975055380919576318050596062308235135004408841271457667682937266428449164024455788553911203388779825068925284834571232433038977048630236756156507461671713890085799271031057811384487407893946529771493016928148026189377338281142956293691678082454850334002983893349552969896378526877395707681354534786999997526038932192680387498555234562333408452843777977355849431188411412697935506058031251330406510451228249070757972281217274654202280242022800989480251303196844773334013410351592061949948901562498600953459897716122572130658661477205263461705220374408780136209402359174266207319057690990696364168536474185462321118595646104549384743742656114557560556669711556958748978506737564140639461850597486116645274402496558201685568857902520123643737608958845980778486830321980056335443065638882584334491714297797926566296287452828373087583644746877771274201312556826739652732754253670993453727934570083171431804644103426429555639132635875177403308066019183618269144453681864986961732128921581645058771487071588443578124367522780402575535472490823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sftpi-intern.sbb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp-secure.sbb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftps.sbb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftpi-secure.sbb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sftp-intern.sbb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftps-intern.sbb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c02a71980baf9de453b53ed710c0c43e4bef2393
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0021d91cf5e48414af8849df1230007dbd30a2bb09c74a163b158da278cd79f139c1ff58c24df8538255fcad6a735d7360fd7419af11b4837f2305931d81abfa802a0c23e39b4d238259486865da402ba4acc10f1cde91745325028ca37f7cb39353f02fd57089fb707bf03e64a6ab54cdcba25a57d84c66568d5fc65848fc94053e85a1744fbf5b83856df72b442735416e138f52a1752b9f0743c85edde70d228d0424fd4289804c69a54201d12ffacef4e02190a1e96f6cd29d1f5d399038dcd217f8a0fa93247bc6224ca5c0568145aaa8a4a891ab6f93682e7dc9d4e248465f4214d96ec2007ab0c16711d0a847923c5751a766c4e2ba2c39299585f6887e00cd381a547e2b3c266d74b21341f71aaafca9801dd96553fbc2ae0cb117a9ed76360fffee279eb28da36e9ca1b1e2fec9b464eee4a6815f9f8228db073a0051ba4ea6225fa77102c345add448be7beaa6fb086aa2165fc6cc11114065ea6ff8ce5d037d47c1f4697b2288a1ba1918b48b178a48fb8443f6642ac53e62a3cd19a0717343df7730e0808a3e5898f5ec874a0bda5ab4364e44f97a721c2c1068246dd4448970617471a79abb95ed6f916c9a6ffe988c618064738e44661d03ec6f64362dba93459cd118e554648e935251df0498a534fb7e65afa9bfe67b1ac6c3a0e9b4d83301d8c4dd5881090436ff28979ca006af374c4afd52ba76e1e99c00