rct1-images-courriel.credit-agricole.fr

- Credit Agricole SA -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:94:10:fd:b1:2e:91:e5:23:7f:31:e8:f5:22:a1:b2:1f was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Credit Agricole SA

Organization: Credit Agricole SA
Organization unit: Organization Validated SSL certificate
Locality: MONTROUGE
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:94:10:fd:b1:2e:91:e5:23:7f:31:e8:f5:22:a1:b2:1f
Serial Number (int): 1492334992913928493568999230510854702215711
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: d8:90:a9:d4:1d:56:9d:23:16:6d:48:39:b6:32:f0:d8:61:9b:20:30
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 4b:3d:5a:1d:c2:59:30:95:33:68:ec:33:7f:a9:a7:b3:8e:68:55:90
Fingerprint (sha256): 02:14:f2:92:d1:0e:82:ce:08:35:d2:63:d0:57:d9:d4:2f:26:4d:6b:57:76:c6:7e:e0:9e:bb:62:c2:7a:13:44


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate rct1-images-courriel.credit-agricole.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rct1-images-courriel.credit-agricole.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rct1-images-courriel.credit-agricole.fr

Other certificates including the domain name credit-agricole.fr

(limited to 100 certificates)
crys.collab.ca-alpesprovence.credit-agricole.fr
www.ds-enligne.creditconso.credit-agricole.fr
silca-mobile.credit-agricole.fr
ata0.collab.ca-nehom-zxr10.credit-agricole.fr
mus10-mesidir.ca-technologies.credit-agricole.fr
sea0tab-00813.ca-technologies.credit-agricole.fr
homologation.apis.nomade.credit-agricole.fr
simu.collab.ca-vmoe-zqta0.credit-agricole.fr
smp10-b0vcl01.ca-technologies.credit-agricole.fr
portailrct-citrix-apps-arpege.ca-sa.credit-agricole.fr
eptcident.collab.ca-martinique.credit-agricole.fr
webdav.vitrine.credit-agricole.fr
ca.nm.etrade.credit-agricole.fr
webmails.credit-agricole.fr
www.ds-g3-esimulca-enligne.credit-agricole.fr
www.aquitaine-g3-quicksign-enligne.credit-agricole.fr
sea0tab-00824.ca-technologies.credit-agricole.fr
www.tourainepoitou-g3-esimulca-enligne.credit-agricole.fr
www.morbihan-g3-enligne.credit-agricole.fr
www.normand-g3-esimulca-enligne.credit-agricole.fr
smartphone-ws.pacifica.credit-agricole.fr
www.martinique-g3-quicksign-enligne.credit-agricole.fr
gfmoawds.ca-technologies.credit-agricole.fr
hrac-hraspace.collab.ca-corse.credit-agricole.fr
www.campg-ediweb.credit-agricole.fr
siel.collab.ca-cotesdarmor.credit-agricole.fr
gedc-ged2.collab.ca-illeetvilaine.credit-agricole.fr
sea0tab-00869.ca-technologies.credit-agricole.fr
www.normand-g3-enligne.credit-agricole.fr
www.corse-g3-enligne.credit-agricole.fr
gedc.collab.ca-nord-est.credit-agricole.fr
cnet.collab.ca-normandie.credit-agricole.fr
car0.collab.ca-normandie.credit-agricole.fr
top10-b0gdc01.ca-technologies.credit-agricole.fr
www.norddefrance-g3-esimulca-enligne.credit-agricole.fr
e.artefis.credit-agricole.fr
botcli.credit-agricole.fr
ca.cl.etrade.credit-agricole.fr
cnet.collab.ca-sudrhonealpes.credit-agricole.fr
www.credit-enligne.syn.credit-agricole.fr
www.exa.prodciblee21-g2-enligne.credit-agricole.fr
ca.kp.etrade.credit-agricole.fr
vitrines.credit-agricole.fr
rct1-macarte-rest.credit-agricole.fr
cnet.collab.ca-morbihan.credit-agricole.fr
sea0tab-00860.ca-technologies.credit-agricole.fr
wac0-spsa-hom1.ca-technologies.credit-agricole.fr
massmailing-grp-ext.credit-agricole.fr
www.ca-e-trade.credit-agricole.fr
sea0-zuda0.ca-technologies.credit-agricole.fr
mus10-mesidir.ca-technologies.credit-agricole.fr
www.ds-g3-creditconso-enligne.credit-agricole.fr
www.briepicardie-g3-quicksign-enligne.credit-agricole.fr
www.paris-g4-creditconso-enligne.credit-agricole.fr
dev1-images-courriel.credit-agricole.fr
siel.collab.ca-nehom-zxr10.credit-agricole.fr
sopuwst.collab.ca-nehom-zwr10.credit-agricole.fr
www.briepicardie-g3-enligne.credit-agricole.fr
www.sudmed-g3-quicksign-enligne.credit-agricole.fr
e.artefis.credit-agricole.fr
rep10-b0gdc01.ca-technologies.credit-agricole.fr
www.franchecomte-g4-esimulca-enligne.credit-agricole.fr
int2-traceo.credit-agricole.fr
rct1-images-courriel.credit-agricole.fr
ca.al.etrade.credit-agricole.fr
www.centreouest-g3-creditconso-enligne.credit-agricole.fr
www.illeetvilaine-g4-enligne.credit-agricole.fr
eptcagt.collab.ca-alsace-vosges.credit-agricole.fr
socleicare.pacifica.credit-agricole.fr
www.normand-ediweb.credit-agricole.fr
app10-b0vcr01.ca-technologies.credit-agricole.fr
www.nmp-ediweb.credit-agricole.fr
statistiques-intranet.adsi.credit-agricole.fr
map10-b0vcl01.ca-technologies.credit-agricole.fr
m.e-immobilier.credit-agricole.fr
www.ds-s2-g2-enligne.credit-agricole.fr
botcli.credit-agricole.fr
hom1-esimulca.credit-agricole.fr
hom1-macarte-rest.credit-agricole.fr
zxr12-b0vcl01.ca-technologies.credit-agricole.fr
ca.rp.etrade.credit-agricole.fr
eptcident.collab.ca-aquitaine.credit-agricole.fr
casa-mobilite.credit-agricole.fr
collab.ca-cmds.credit-agricole.fr
www.valdefrance-g3-esimulca-enligne.credit-agricole.fr
www.charente-perigord-g3-esimulca-enligne.credit-agricole.fr
www.cmds-g3-quicksign-enligne.credit-agricole.fr
nmb.credit-agricole.fr
rct1-esigner.credit-agricole.fr
consoventeppa.credit-agricole.fr
reunion.vitrine.credit-agricole.fr
www.norddefrance-g3-esimulca-enligne.credit-agricole.fr
assurance-personnes.credit-agricole.fr
owac.collab.ca-paris.credit-agricole.fr
rct-qualitycenter.pacifica.credit-agricole.fr
sea0tab-00839.ca-technologies.credit-agricole.fr
www.corse-g3-enligne.credit-agricole.fr
sed.credit-agricole.fr
sidosimm.ca-norddefrance.credit-agricole.fr
www.lorraine-g3-quicksign-enligne.credit-agricole.fr

Certificate

The complete raw certificate details for rct1-images-courriel.credit-agricole.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4zdgU/96SaYI518tnZr
RTm6oGa2LUaESIfoiBeUHUtcaRbWTyCokle2E4Z9EbdKjLnr5+5Ui56Gxd0VR2OF
iiMPcEGax272AOIt1Diz4YjFyq8MP2QqkbIsI4F6JNY/6J58Ob3O5NHrlBf+5wtA
fKAj8g8Z9DmfKm5d1YmbJBuJzQjmxDly2nO+YwDtKKz4FEl8wyVYGydFcHGjqi2J
wizSBTnBH5866VJNJy4BCTnw6jlXdYg6IgtN4HSpI5L/v9h7yr7uMnwF2w8uIG8S
Rgf0vT0Wv31TnFhpb/yt1CEiplU+kB5LD0BioILEdfbwd2HafPUwsEbvmQjZfCKx
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492334992913928493568999230510854702215711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 07:48:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 07:48:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MONTROUGE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Credit Agricole SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rct1-images-courriel.credit-agricole.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23171073054664821545477099199183848441923856533445854568977917622115679736036622579959188615192573483160076714923437566767637487348903538334076932054734205662676161333931789399612788585926564058033613811045383194690620391596803938447285887533135790854443867485753244215957418267044467775487223599732018515591469063530844837207620217079143856130606708210242032686133648952627129288172738559396206980017286258881048242434898056124138837026723959503212637051376494378863809588030526684425416731248623959126669877462579815113790368379402055517123146799934207601132219799632804390402479860112149382223984208785042697269679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rct1-images-courriel.credit-agricole.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.3.14
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d890a9d41d569d23166d4839b632f0d8619b2030
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00382d0aff93e6ea240ec40c9cb88c6d786abfadbf5c44706d44d7d88ef75c89cc8c296cc7c04913c1177c5599e8a1417b45177e11579330ed0c30f06628d2936fc9fbcd1f02b276dad7d0583137987f449cf4968d9d933f36ac88df760e9ba4cb53bffadee9af0f9e22dd92d041185323cb95583f7481fcc7bb878eac79e629a2b31796f1db2e9ade5e1a34ca8dc940e1d48c09911b1ec6b2165be4ce40be96190888b10d565652c20890a2d372a2703e9e3d2f654d183ee088391709e55c60ff9b50734871ca852946f9a07f7182d2374a68ff6dbcc170203b2e305a3089a8b05110a542f0545692bc7ddd052269ddbde603583bc3b19db6cb2c71b91b99acf8