tk20.ehe.osu.edu

- The Ohio State University -

Issued by InCommon Server CA

About this certificate

This digital certificate with serial number 53:85:24:d9:b9:c6:e6:51:99:24:78:6a:d4:ef:e0:74 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Ohio State University

Organization: The Ohio State University
Organization unit: The College of Education and Human Ecology
State / Province: OH
Locality: Columbus
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:85:24:d9:b9:c6:e6:51:99:24:78:6a:d4:ef:e0:74
Serial Number (int): 111017246549085328359852003581886455924
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: de:61:bd:8e:5b:2b:5e:f9:d9:1b:16:55:95:d1:6e:f6:89:a4:bd:b9
AuthorityKeyId: 48:4f:5a:fa:2f:4a:9a:5e:e0:50:f3:6b:7b:55:a5:de:f5:be:34:5d

Fingerprint (sha1): d9:47:f3:57:19:72:0f:e9:8f:f1:b6:7e:ca:28:b2:40:1f:aa:b4:60
Fingerprint (sha256): 02:58:cc:d9:28:ba:37:9a:44:e7:a5:45:11:8c:a7:2d:8b:1a:c2:e7:91:b7:30:88:5a:0d:26:95:b3:59:99:7d

Issuing Certificate URL: http://cert.incommon.org/InCommonServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon.org
CRL Distribution Point: http://crl.incommon.org/InCommonServerCA.crl

Check the revocation status for certificate tk20.ehe.osu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tk20.ehe.osu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tk20.ehe.osu.edu

Other certificates including the domain name osu.edu

(limited to 100 certificates)
5757715179634688-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
adams.osu.edu
test-web-lws.edu.help
5719238044024832-fe2.pantheonsite.io
offer.osu.edu
5767917874446336-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5631986051842048-fe1.pantheonsite.io
acarology.osu.edu
opensource.osu.edu
5719238044024832-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
5660980839186432-fe2.pantheonsite.io
5646874153320448-fe4.pantheonsite.io
5698125863845888-fe3.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
ucdc.edu
history.osu.edu
5644101080842240-fe2.pantheonsite.io
5687379545292800-fe2.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
nartc.fcm.arizona.edu
ksa-mrbs.webapps.engineering.osu.edu
5732910535540736-fe1.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
socrates.osu.edu
costume.osu.edu
5676201666412544-fe3.pantheonsite.io
bsal.osu.edu
*.webtest.osu.edu
5672591746400256-fe3.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
5662543133540352-fe4.pantheonsite.io
cse.engineering.osu.edu
5722152447770624-fe1.pantheonsite.io
tbi.osu.edu
5690257819303936-fe4.pantheonsite.io
alkireproject.osu.edu
skullbase.osu.edu
5740745361195008-fe4.pantheonsite.io
insight.tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5696381570252800-fe2.pantheonsite.io
5668753656250368-fe1.pantheonsite.io
5741031244955648-fe4.pantheonsite.io
preble.osu.edu
5676201666412544-fe3.pantheonsite.io
5707725409353728-fe2.pantheonsite.io
test.eis.uw.edu
5734743547052032-fe3.pantheonsite.io
legacypaydocs.osu.edu
chembio.osu.edu
heroesproject.osu.edu
tas.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
www.design-engineering.princeton.edu
5677751478517760-fe2.pantheonsite.io
intranet.odee.osu.edu
heartlung.osu.edu
cfaes.osu.edu
5672591746400256-fe3.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
iam-pamprd-db01.bcd.it.osu.edu
internalmedicine.osu.edu
5696381570252800-fe2.pantheonsite.io
nxterra.ucop.edu
5769720821186560-fe3.pantheonsite.io
buckeyelink3.osu.edu
5676982813589504-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5182915545661440-fe2.pantheonsite.io
5676201666412544-fe3.pantheonsite.io
ehe.osu.edu
tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5726348362383360-fe3.pantheonsite.io
bme.osu.edu
5711637696741376-fe4.pantheonsite.io
mae.osu.edu
5665925286068224-fe2.pantheonsite.io
api.agg-qa.webtest.osu.edu
buckeyeturf.osu.edu
ehistory.osu.edu
akips01.coeit.osu.edu
5668753656250368-fe1.pantheonsite.io
www.hcii.cs.cmu.edu
5631986051842048-fe1.pantheonsite.io
tk20.ehe.osu.edu
advancementintranet.osu.edu
5662543133540352-fe4.pantheonsite.io
www.blogs.earthjustice.org
gisprtprd01.bcd.it.osu.edu
5722152447770624-fe1.pantheonsite.io
artsandsciences.osu.edu
bpte.osu.edu
*.nursing.osu.edu
suicideprevention.osu.edu

Certificate

The complete raw certificate details for tk20.ehe.osu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKWvWTvcJNYY7Jj+uRp
TfgwlFRogtreUWcRJAwu6MSIPhuXa1dvsczTo054b/Eo2GT8kNS1RnptQdgeVqXs
OU3K/OGUBHK3KJD3Wou72xYmezM/ZRq9nT6Q9lvCAUeVSbMABfuEoTynDsoHA7JL
Lph/hW8KDo5kKvVs2Sd1szJdad0CAUVxHQpPyunoh3tnd9EHDNcNliEBWLMdt26u
Mm6KF0TIGYe7/gm+2jEBEmJ+P4gJJ1uHSXEOzGjbOC1uensoU1uvr1UY6SHOV33j
3z9ZyRPn+bR0KmQhPssbmz5/mUNhoYSV2LSu1ZHlnOypFt0BXPD3KqpagG9UEE3n
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 111017246549085328359852003581886455924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Ohio State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The College of Education and Human Ecology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tk20.ehe.osu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21840503357512039412834053125860753069236161064428706148308799188811458515772211109088398345704811614895064267797288958571284543397180916287865558950729230518794426887459377505765356204132586215673338332589126951377825593712735012185729479876050436482509071981819067858930140072028637052880929276079947714011714592164493262613571164234615717718102200674605012098125182146592550159416633965392050801293692154624381120093216087560658687466618572146691243050087081494929263858562596358257345533117204883114125401040271935746809953078680295780337119077845076914512977115852872593125579763769095163346288472544503917307741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 484f5afa2f4a9a5ee050f36b7b55a5def5be345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de61bd8e5b2b5ef9d91b165595d16ef689a4bdb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon.org/InCommonServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon.org/InCommonServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk20.ehe.osu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000babe432fd5d1d8f576695c215d2bd88cbcf432dc59a461aa243b610aaa97ab5008bc23bd33c4ac59502adca29c7e6aab0dc7aa9cd59ef00e419869e9d77bb482dc588b92e73d44ed5a53c93874fb84b77dcac04a590c1bd709702c93debc0f10fc2174deba1d9c65e651385595992f6c6490602818d59bd182bb6472b8820885d6a7a804d0653a9a1f971f5342d1304d406b8a595f5e6d0fb1f65ef58fdeacd0a4d2dc35daa4a19d994632de93cfc3db67179f5a31cdfa833af3228f053185c5589cae57d074fd57e4fce7e58b0144799026c580633e7afdfff65509acaa3f389049280b42a1f5939952515bf2488ca99e6828c3c70d460f4e5646ba4ae3fbb