gabi.apis-test.post.ch

- Die Schweizerische Post AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 06:7b:2e:07:d9:3e:a6:eb:e5:2b:d6:91:b3:f0:2c:c3:44:72:2e:d0 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Die Schweizerische Post AG

Organization: Die Schweizerische Post AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 06:7b:2e:07:d9:3e:a6:eb:e5:2b:d6:91:b3:f0:2c:c3:44:72:2e:d0
Serial Number (int): 37000946120259516269816110653330319971871502032
Serial Number lenght: 155 bits, 20 octets

SubjectKeyId: 89:17:57:d8:0c:e8:2e:fd:6b:2e:fa:64:f8:4f:e0:14:93:64:f5:6b
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): c3:58:26:a9:33:23:d0:cf:85:f2:b5:0d:fe:8c:bf:ba:69:ed:81:7b
Fingerprint (sha256): 01:eb:61:7f:72:a5:74:1d:a6:d2:08:e5:76:14:f7:d9:7f:ae:3a:2c:cc:7b:b7:f0:9b:82:22:91:d7:ed:8e:1b

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate gabi.apis-test.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gabi.apis-test.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gabi.apis-test.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
cockpitint2.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch
sventest.post.ch
patient.sanela.dh.post.ch
e-mobilityint.post.ch
sapmsint.post.ch
gollum.apis-dev.post.ch

Certificate

The complete raw certificate details for gabi.apis-test.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37000946120259516269816110653330319971871502032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 07:55:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 07:55:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Die Schweizerische Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gabi.apis-test.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818136153652301455742408532090435077057753024285354905993723928483978097396975490923264007973671337946298900112768160468923297608235129308076634242453003239994459911023767940917793465245505681436973144277931954834208632887518050410423527839938842719763191698851166377481456179958117447730156658729069821255832048159527290891490074370367423940032488336477674122056184586267223878488531487416961978141577569839446455675798348647596004679227084926508804358668070728999542346063677778769785496663877819950707810553424720031654311332135985411768086916808289323433777468673311369009774019548454291142405536427856146480634967815000607291725747036339599594365472695591595527786726822736921576451747327454885482156692340667123406215829385312077103000521189218303192386893812868419791958271741078662039298941002732251118567770302863105806845559171932544578541292050942313130989613120028165505006455627533269664793065796169502533456172305294589925137062736914108999814825529405305780006745623646825577792956516258392563171287194851019285894118721665372436880688081415691003312673488433542315881506673704050227326012962565734422549030591636784672540107347943769199347132710101011202740337835614886130323638018480794938720485058050888341921527403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabi.apis-test.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							891757d80ce82efd6b2efa64f84fe0149364f56b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							02590076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018a3b23c0040000040300473045022061cd698ccefac1addc622c47dddaf80e15c47fdda83050d3bb4a88ed3d714ab9022100ecfef84879b0fbd790c8140761e4c47431d8796bfaa9bd1c18436549736380a9007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a3b23c77c000004030047304502210094ccd1e3a558df3c53de38fd87b821e7ab869f88a224b2aad6ce6544bf97eeb902207c89a465a18435eceb6d2523b09cbdf14c82051f5888b4b50d091bcf106a6e2b00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a3b23c84300000403004630440220616cf67bf515966254204b5280aaea842104bc4c24163f00991c40c63222389d022049b802fe2301208fdae7246d6e55850c27ef1a39a1871c9a05ddc94f8d7f7bb2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a3b23c98b0000040300483046022100fdc2ede330d751e10a193885d8a6f468dcf89dbf88dcd16f0cca73338a4834960221009de625f645f2f7513c789bdaf148b1133091be8e0bdb0d2b0730564f9249b0d7007700874fb50dc029d9931de573e9f2899e8e4533b392d38b0a462574bf0feeb2fc1e0000018a3b23cd73000004030048304602210083066de51403284860c2ba713ed57079bc8b3aee57dd9cd2893daeaa3bfab1fd022100d1b992038b53b181ff591a764eaef1948f9fb0218099dd8b404ba9a1c5a94832
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a55d624161f06e96820c599fbab20ced1733ff1c40d1ef5f32d13f17d89e8bda9562a012d3f094e39f77e002fee7cd3a769ade62d689a380d01decdf08a3e344f3745dbb9a056ca57ee10c23eeec1b908536be3de9ea1062ca4f08f962885ef3edf2b220c13c68db02e1bc74c965ffc1e66679f768115d1ef8a37b3960b2d1d162280fd9916759f66e3a537c76cb19670fc3d9f760620e6ab4dffb05040ca0b8a478dd259fa5bbecae83809bb2b3af1ae16038cd53a81966606a513c3bd68125530ed8d4327af8299e9a6cce7c99eefa15a705ff31b9ba07d69a4c7ac815e531198d39ec5f058ddcafdf4315f05f9ca30ce53409e0905b010ae9d25b0cd0940c5c87a6dff3e510b4070811a26c02ee708ab897998170f4ec1a79b28394e54b4a8dfb1ad0ab0632ecc2cbd04af40a4e9f5653017dab8c1134a9d10443d8ec0fcf66f22229a4da54073f28947b8ade245a6d6890eb93de0d0e77fbcce7e48157535dec67883867ab0c08554db625da83416d9684d5772b93f3a060f229756bf072475b1bdcda0e6bea840242d30a1ade65c0a5e712427e24f9cbbc39ac6f1325871e3b0ca3aeb169aeb237dca09000b1cee4b0c11570a779d7f9dae74ef88763c288e79d01ede532445968a8c57ff1b6f26dabf491cde780fa2951a6d8e1ce2179acafbb6dc071b8e8044867751903572312b9cd8eb2b821b8087ea82eaeccd977