goarcbj1.dhl.com

- Deutsche Post AG -

Issued by DPDHL Global TLS CA - I5

About this certificate

This digital certificate with serial number 01:aa:e7:b1:14:a8:9c:c7:3a:e4:6c:f3:af:37:22:ad was issued on by Deutsche Post AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Deutsche Post AG

Organization: Deutsche Post AG
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Deutsche Post AG

Organization: Deutsche Post AG
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:aa:e7:b1:14:a8:9c:c7:3a:e4:6c:f3:af:37:22:ad
Serial Number (int): 2216617728132585228848871260036735661
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 32:54:4c:04:6a:ac:b5:6f:f3:70:24:4b:c7:fa:8c:54:ce:6c:03:bb
AuthorityKeyId: ef:5b:f4:4b:86:f9:d6:f9:3a:53:89:09:bc:20:8e:bc:1a:ca:22:60

Fingerprint (sha1): c9:48:6e:4f:e0:a2:5a:be:da:22:6c:c9:58:e4:65:23:76:81:69:a2
Fingerprint (sha256): 02:ce:09:df:42:da:c7:a1:de:06:5a:af:f1:6e:50:41:99:04:1f:30:70:25:1f:b9:06:25:19:47:bb:35:db:97

Issuing Certificate URL: http://secure.globalsign.com/cacert/dhltlscai5.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/dhltlscai5
CRL Distribution Point: http://crl.globalsign.com/ca/dhltlscai5.crl

Check the revocation status for certificate goarcbj1.dhl.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goarcbj1.dhl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goarcbj1.dhl.com

Other certificates including the domain name dhl.com

(limited to 100 certificates)
dsctmspptr4.dhl.com
san-10-s10.tlsprovisioning.exacttarget.com
ideahub.dhl.com
CalidusTMS.dhl.com
direct.dhl.com
fcp-backend.dhl.com
tm300i.dhl.com
gaitcitrix.dhl.com
tradeteamdeg.dhl.com
api.dhl.com
jdadlxp1.dhl.com
dhllink-apimgnt-qa.dhl.com
gbsdoxis.dhl.com
cz-wgp-syr.dhl.com
payments-mybill-uat.dhl.com
agente.dhl.com
iis.ecm.stars.dhl.com
docs.dhl.com
esolutions.dhl.com
confluence-test.dhl.com
parcelshop-ref.dhl.com
prgdclyaee01.dhl.com
dsc6stars-aca.dhl.com
flysmart.dhl.com
lots.dhl.com
dgf-elp.dhl.com
dsctmsr2.dhl.com
beta.dhl.com
netconnect-bluedart.dhl.com
packet.deutschepost.com
D5UsO9AHbG.dhl.com
test-api.freight-logistics.dhl.com
dcscbj.dhl.com
www.smartsensor-temperature-test.dhl.com
pp-meinservice-grax.dhl.com
csg.crest.dpwn.com
dci2.dhl.com
comuat.dhl.com
SPDP-ref.dhl.com
mits-ia4-ext.dhl.com
npts3test.dhl.com
www.dhltoolbox.se
V-DA-002.dhl.com
dhlexpress-myjob-api-test.dhl.com
external.customerreports.dhl.com
keyserver-lab.dhl.com
dcontest.dhl.com
imgit.dhl.com
test.gbs.dhl.com
*.datalake-dev.dhl.com
cyclone2-eu-prod.dhl.com
dpst.dhl.com
dci-dev.dhl.com
m.dhl.com
aux.dhl.com
webmail.dhl.com
dscotmllp05test.dhl.com
gatwickdirect.dhl.com
mailing.dhl.com
cvpn.dhl.com
reqit-dev.dhl.com
esecure-int.dhl.com
ryr.dhl.com
logistics.dhl
QA-tmsweb.dhl.com
apigbs.dhl.com
aviationmailsync.dhl.com
keurignj-6rivers-prod.dhl.com
czchoap0214.prg-dc.dhl.com
ADMSSCICERTWebService-temp.dhl.com
prgdclywse14.dhl.com
globalmaileurope.dhl.com
connectplus.dhl.com
kuldclyaee21.dhl.com
www.dhl.com
globalecom.dhl.com
cvpntest.dhl.com
back-eut.dhl.com
us-dsc-gvp-ac01.dhl.com
gsconnectcsm.dhl.com
isupply.dhl.com
irecprjb.dhl.com
dhlexpresspt.com
wsbexpressuat.dhl.com
amrta02app.dhl.com
servicenow-dev2.dhl.com
www.packstation.de
direct.dhl.com
fidgfcustomsdirectaccessprod.dhl.com
amer-clock.dhl.com
spl-test.dhl.com
onlineshipping.dhl.com
goarcbj1.dhl.com
czcholsint1661.prg-dc.dhl.com
portalemydhlplus.dhl.com
packaging.dhl.com
myaccount.dhl.com
mobilefleet-test.dhl.com
jupiter.dhl.com
mirror-bat.dhlec.dhl.com

Certificate

The complete raw certificate details for goarcbj1.dhl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+E13nqZdwpPw2U463Tn
fUHa7FU4VEtqxMlXozBLvQ8UzhsBH1hCTQDXvE4BnpFrLsAf69jGPsqY7bl/UFKC
mmCvluzMQsDbI5FkajVShsGoPjsHQm7v8oKf5RfbQQQW97RPhlYzVreXj4NAOoeV
ta6zF6LhJheh9uuqMHQPv10wlzZYkMSLYU1ajUURPPwukt0EVXLu+PdvoqlS0JiG
yt8OdsxrhvBoq2pBHfc+ybaoZMFUUgKTY6OhSU3WxGrAtTToVEIcwdI3034D/351
r1HubDlpuAjLffcoLS2Y1kwg+eB8AEd+daKWNKuKFT1jBVuaHMCxrfS/Wu/M/uRe
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2216617728132585228848871260036735661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DPDHL Global TLS CA - I5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 15:06:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 15:05:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'goarcbj1.dhl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27252290967858925859606698050153415250954926406591139652165448794006189849431980823583111497980367079566360096310161740020931344529942568171311753087934527113016169486873742228314443285441859883227081244118704205522279689592463854318260627555286926921462141184257100875701675504854629076078220496561791209402276745826740279048898537018278412040979443299316708907934720540388543486901436337155581364305870631416505398121293209330934090942267702111240435977336004513834451530389787355073124262004508232110245137357324526658567459172468046862705148085627063476287721929117305533550466975731922785495738725975822241652361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goarcbj1.dhl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32544c046aacb56ff370244bc7fa8c54ce6c03bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/dhltlscai5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/dhltlscai5.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef5bf44b86f9d6f93a538909bc208ebc1aca2260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/dhltlscai5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018cda28beba000004030047304502205350df3c91747031d9e27f8a63fbdf2f37d81d240492be24d036f45b6cfae656022100cadd57614a2166f235133bca38526789d0b92a3f31d789b9c281012012be519b007700cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018cda28bed70000040300483046022100aadee5d9e97453af1e863cc6a2ab8d227bedfb887e9b5cab0954375ded7052bd0221008285ff99c275026e039adb4d6880961b13562e9eedff091f4cd65bf8512428050077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018cda28bf6d000004030048304602210095804ff02a79fec14dab93dec60d6536cbcbe6b33249cd6ec5cbed940aac4999022100efe3a5de71e9ef1b6dc31a511cfbf0991cae4c1d1bbd0b9601071e9c2e11c1c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065c2512a01808e8fd14eb46154df9386c03604b0751015cab207a008322beba245464ca273b15e6d38e3d1fc056554807b324253aad354d993f5b743e00c27188fbc79c2ae7aefc6cbf72a0a957a7d6c59f05d1a43c21f7e982f29c551b7d17906a82a39633af8eedd98780a0b2b2e62ba56f2262fea58a86f784ef8b5e2bdab60a621ab39c4c35c695a5f2bd1977714f16c909235d0d421844be6fecba08f63718da540786ed0e41b9bdc9520eff2db0d616659ed87521d6b91f17d3c150f8150e63fa6f11fe858f20eb6b82fb3aaa2950e80ca5f7b5d54dac9d90bc33ed15198e55551d3aa6e0babc9df3fd0150f3552665bfaa5142187e084a96c8e866b78