www.kcl.ac.uk

- King's College London -

Issued by GEANT EV RSA CA 4

About this certificate

This digital certificate with serial number ec:ea:cb:c3:47:12:87:44:9a:ad:89:8a:67:59:68:f2 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

King's College London

Company registration number: RC000297
Organization: King's College London
State / Province: London, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): ec:ea:cb:c3:47:12:87:44:9a:ad:89:8a:67:59:68:f2
Serial Number (int): 314916937270774362388084557899581974770
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fc:b9:bd:75:f6:ad:26:53:c3:22:1b:47:60:49:92:9b:f8:a4:ca:71
AuthorityKeyId: b6:20:0e:ae:a3:cb:e9:55:03:06:13:66:d4:ac:be:27:90:54:60:f3

Fingerprint (sha1): 47:18:9d:2c:33:73:84:40:7d:4a:16:84:16:c9:cd:b6:03:04:87:80
Fingerprint (sha256): 02:9d:af:5f:b6:ba:34:00:19:b1:f1:9c:87:f0:2a:d6:bb:c8:85:f4:0e:45:dc:c0:41:8c:f2:9a:2b:f1:30:75

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl

Check the revocation status for certificate www.kcl.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kcl.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kcl.ac.uk
kcl.ac.uk

Other certificates including the domain name kcl.ac.uk

(limited to 100 certificates)
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
covid-testing.kcl.ac.uk
www.brightlinks.org
support.kcl.ac.uk
addneuromedsrs.kcl.ac.uk
achievements.launchyou.com
charm.kcl.ac.uk
training.kcl.ac.uk
achievements.launchyou.com
s2lab.kcl.ac.uk
www.brightlinks.org
charm.kcl.ac.uk
www.brightlinks.org
ems.nms.kcl.ac.uk
www.ctr.kcl.ac.uk
www.kcl.ac.uk
thestrandgroup.kcl.ac.uk
www.brightlinks.org
charm.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
accreditation.lumanity.com
www.brightlinks.org
mentoring.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
alumni.kcl.ac.uk
placement.kcl.ac.uk
www.brightlinks.org
athenaswan.kdl.kcl.ac.uk
triangle.mth.kcl.ac.uk
cturandomisationmvc.iop.kcl.ac.uk
*.libproxy.kcl.ac.uk
blogs.kcl.ac.uk
www.brightlinks.org
iospe.kcl.ac.uk
www.brightlinks.org
amdb.isd.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
mentoring.kcl.ac.uk
san01.hosted.exlibrisgroup.com
mentoring.kcl.ac.uk
automation.platform.kcl.ac.uk
achievements.launchyou.com
librarysearch.kcl.ac.uk
sharc.kcl.ac.uk
media.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
nmmoodle.kcl.ac.uk
kclsfbpool01.kclad.ds.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
api.erg.kcl.ac.uk
ircyr.kcl.ac.uk
mentoring.kcl.ac.uk
khcn.kcl.ac.uk
mentoring.kcl.ac.uk
library.kcl.ac.uk
achievements.launchyou.com
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
curium.nms.kcl.ac.uk
radiusacsd.kclad.ds.kcl.ac.uk
www.brightlinks.org
accessedge1.mykcl.info
www.brightlinks.org
accreditation.lumanity.com
keats.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
csgs.kcl.ac.uk
libcal.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
www.isd.kcl.ac.uk
www.brightlinks.org
kdl.kcl.ac.uk
mmee.kdl.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
kclpure.kcl.ac.uk
testlibrary.cc.kcl.ac.uk
accreditation.lumanity.com
s400.kdl.kcl.ac.uk

Certificate

The complete raw certificate details for www.kcl.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314916937270774362388084557899581974770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT EV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RC000297'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'King's College London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kcl.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793680794666379171104021171757676428400624289082212802998677088200874543493455722562937041892350296832896002143306648792672963343102818286004319327941228406997419396173462954835431258116660175733094417758558044463838266622374454591556155442431638468187299953842657753489524893103768676252531810399575868758142542410233562831960200476084683477120804496409521288184095119182711283547053937326755619793942091653220717284584744027801814178247334627318048571162715244545364138024579361892347226891211444099551331863520726604670292167129403673853495518637148736570577927152386011653987159977464207187893927979867087214005472201023849114267323182656458143160305442240353347772122406292248866849515783816588230091637415422732451763055366549156794308616124199454175447848222083556785609388729295391874658818391853348420377752577517253665270291203671105283663614472371604806076654151177891144108018504579725429659800412058965481211585445609717000421777978339344626116325629597475405287872332548357495855999907068770117941905222715441842842343966415534057663008926342681323776929476260653843124543507719045617008187813151852225981578440471043076330991860746527301133751715930542961570413041193013011750299304262999138347039663883391234656984349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6200eaea3cbe95503061366d4acbe27905460f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcb9bd75f6ad2653c3221b476049929bf8a4ca71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcl.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		007d494ca523fdbc89772eea98507729d8702ad773a9cdf2054bf481bae347747658eed486269593bc78fd6c6bb30a73db4a0872f6567aed66275e2001fc18f2cc1c56707958d3dd7e28c8bd0fa42e06c20a781e137a61ffe82bd62feb7554578fa54ea5910299b671d5cf89a7bbad09c0b94ab787a3b4ac7b82968d8ddd778b72995a328e124be12f72f4a7ac10b387b4d9711539b8bc60dcf560e11588e58d08d33fc142d5ba0dd41df86103dfbf7687a85c079159655ab92de114cb92c452321412f4e1d2d112caf305235ff9cb4497c37d72e8f8867454102c3d80ef33d035b60cb0479070fb0a4872ca85bf085700557f2267e93fd8bb4092bc158cabe40945f5096dc3f6199a56473a8f92532f673cb213a434cf1f3863347369e85cd626ca006d94d90e2409b1fc47a02fe4d56bf46d566f3cb41dd9d5d6054a162482e6f2a6c5eb53458c98e1fa55aa24e35cd6b61a910e650b63932a7c81d0787da894f03ccacf933a06e0ab00e51ea170f78f508a95093950db40e5c1153271486f495219dcbcd2b001b7dae835540fe57a0ae6e4c57c0cc4f52d5c2f0fbbac2ce8bbedd9b8c1fae2be906a9174596e6dfdebeaa38052729515a57a9e83b6715695dbbf366b35074d7a09961e2046d200a1f08d496b1d0a0dbf8a3256c69db1aa4bd7873f3b8cfd5fe94c3fe6eb51325e539c98b14df31a042fe7f64819157ad47195