abc.testcertificates.com

- Entrust, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 48:56:0c:03:71:dd:c1:b9:00:00:00:00:50:e3:ca:74 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: Entrust Certificate Services
State / Province: Ontario
Locality: Kanata
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:56:0c:03:71:dd:c1:b9:00:00:00:00:50:e3:ca:74
Serial Number (int): 96151196888187562933291504464805743220
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4c:37:b5:cb:34:e0:3c:e5:9f:f4:0f:3c:bd:3e:16:e6:4d:34:ba:ad
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 91:ea:ec:21:78:65:aa:18:6f:b2:72:d1:b9:16:98:6b:51:dd:1b:6e
Fingerprint (sha256): 01:e7:d1:51:1b:c1:c9:17:5d:2f:50:80:7f:53:ba:33:22:e3:68:a6:46:c7:9e:66:48:3e:cf:77:11:e0:54:8b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate abc.testcertificates.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abc.testcertificates.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abc.testcertificates.com

Other certificates including the domain name testcertificates.com

(limited to 100 certificates)
a11824115234.testcertificates.com
standard.testcertificates.com
a119778026.testcertificates.com
a1202384735.testcertificates.com
*.a117731066.testcertificates.com
cole.testcertificates.com
cole.testcertificates.com
a1177191343.testcertificates.com
*.wc.testcertificates.com
*.testcertificates.com
API.costa.testcertificates.com
a11877101548.testcertificates.com
cole.testcertificates.com
a114273154320.testcertificates.com
a118332112913.testcertificates.com
*.testcertificates.com
apinew.testcertificates.com
EV1.uatentrust.testcertificates.com
juan.testcertificates.com
test.testcertificates.com
fonzytech.com
uc.Testcertificates.com
a1151751391.testcertificates.com
testcertificates.com
a118213113511.testcertificates.com
dokic9222.testcertificates.com
uc.Testcertificates.com
R-API.testcertificates.com
testcertificates.com
testcertificates.com
a1178114949.testcertificates.com
a118113111547.testcertificates.com
pfortnermau2.absa.testcertificates.com
test.test.testcertificates.com
snhw07.testcertificates.com
Entrust Corporation
certbotttest.testcertificates.com
*.a117200115350.testcertificates.com
a118197135013.testcertificates.com
eurocom.autopscript.testcertificates.com
*.testcertificates.com
snwhq02.testcertificates.com
nginxtest.testcertificates.com
testcertificates.com
a1178115492.testcertificates.com
a115264152841.testcertificates.com
standard.testcertificates.com
*.testcertificates.com
a118196123012.testcertificates.com
abc.testcertificates.com
a118336104046.testcertificates.com
standard.testcertificates.com
a1173238367.testcertificates.com
a115202133128.testcertificates.com
a1169173759.testcertificates.com
testcertificates.com
CMD.testcertificates.com
website.testcertificates.com
a11992104632.testcertificates.com
DoNotRevoke7.testcertificates.com
a11527115137.testcertificates.com
Testcertificates.com
wwwtest.testcertificates.com
a118114142415.testcertificates.com
a1171061691.testcertificates.com
testcertificates.com
a117323122659.testcertificates.com
www.testcertificates.com
turbo.testcertificates.com
a11973114057.testcertificates.com
testcertificates.com
a119237132243.testcertificates.com
a11774145726.testcertificates.com
a12113872532.testcertificates.com
standard.testcertificates.com
www.a11912912549.testcertificates.com
a1176175028.testcertificates.com
ubuntu-api.testcertificates.com
testcertificates.com
www.testcertificates.com
test.test.testcertificates.com
testcertificates.com
a1177465845.testcertificates.com
testcertificates.com
testcertificates.com
a117200111038.testcertificates.com
webmail.testcertificates.com
testcertificates.com
a1182008321.testcertificates.com
333.testcertificates.com
a11434811406.testcertificates.com
11ab.testcertificates.com
a114351111539.testcertificates.com
test.testcertificates.com
a1181408026.testcertificates.com
testcertificates.com
*.testcertificates.com
www.testcertificates.com
Entrust Corporation
a12030153443.testcertificates.com

Certificate

The complete raw certificate details for abc.testcertificates.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/fHcGuYHkG6wGbRokdR
qtZ66U1knMRjYhYVW91F2WpG7jj6VM8nANThp9/su9qNO2BX+nMfFRzmM6wiNEKh
eBIsoXyBy1+cHj/eoodhy3Rf5Vw4/RLwyNoTd6VxqvM9ofcykF5KPha9zRsjM5//
PTMiMmDXXqk3k0jb+s/I1HfTihLwTEmKF8wwK2k6qyFG+rh1mYwRuW1oy6qK/+Th
o8hV2r/v/mWKHUczNiu0Az++SB1O9WTW8vsH5yyjGBdEq4fzwcQQqZtPTw0X9wnM
1YMk22rYlh4ZkYAmWRwNGqKFGY2D9I3F4tui757TqLsh7Ph1IpXuLjwmxyEllcgG
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96151196888187562933291504464805743220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 17:53:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-12 18:23:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kanata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certificate Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abc.testcertificates.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20194074897544195513220526467051073766333106000038130685533605527197419695489140759979334818201781376134417409959099893515829258792770636073248798294742333689128624648397116067521756607225801632237165036299410700832250880595536956823541705761960604404035960230025028487103048744002803909495512194652014483609524349361689734748645167750193943485724814930295877657353050496696090488263294262440660644608498571387187252971638717484981478903204062093038974473778461978224731516223121534894415357498439874477841827579267322205860227467799876345543163358068677401321519661125472456314695662435321039180655022158949967726183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc.testcertificates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c37b5cb34e03ce59ff40f3cbd3e16e64d34baad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a0319b24553df9b5772d3588d754848b9e0a19309b49db27cd2b3c82db1e3f6ecd382b2d85ffef54bf19ca0a60e7c11c2882fb2edd01f925040d23be09d3257383739de4c15b90f45d40e1f232fa6fb1c6e21328b8a4b4b3d87f1cd88b53433bb7487e543b182b987af05352a34fd286b6af7743807c872f6a876ee10679b1a0b439f3da1561cd7f0a1382c3efd3de67e8e377a17c33782132a94568be7aeb21583fcadf8b9eee5b7b5e1ece9f21651f3c83612ebd1719b988ccd75fe5904395a981ec84fed13668c01194c0de2f5f67b7aa269043bc8e23d10ccd246a96e99a992372f6c26dc132a9b0c2dd3494446389315a397930743970f99fb9e724c8be