www.hydro-lehre.uni-freiburg.de

- Albert-Ludwigs-Universität Freiburg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 25:3a:0e:f4:da:ea:14:bc:2f:ff:85:3f:2c:be:25:0e was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Albert-Ludwigs-Universität Freiburg

Organization: Albert-Ludwigs-Universität Freiburg
State / Province: Baden-Württemberg
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 25:3a:0e:f4:da:ea:14:bc:2f:ff:85:3f:2c:be:25:0e
Serial Number (int): 49482892414993730605399159108116817166
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e4:a0:dd:f4:26:18:00:43:37:d8:ce:e3:3e:5a:59:58:af:ac:9e:01
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 3e:8a:05:f7:5d:a3:e9:9e:6b:1a:f4:43:50:ca:db:b0:cb:ff:50:aa
Fingerprint (sha256): 02:fc:64:ab:7b:3e:e1:7b:17:f7:cd:ff:89:4a:08:7d:c7:19:ba:a4:7e:79:44:0d:a3:f9:0f:5a:39:9c:f5:80

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.hydro-lehre.uni-freiburg.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hydro-lehre.uni-freiburg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hydro-lehre.uni-freiburg.de
hydro-lehre.uni-freiburg.de

Other certificates including the domain name uni-freiburg.de

(limited to 100 certificates)
smartexerg14.imtek.uni-freiburg.de
cggitlab.informatik.uni-freiburg.de
zu.ub.uni-freiburg.de
hrk01.ukl.uni-freiburg.de
www.math.uni-freiburg.de
stalker.uni-freiburg.de
compendium-heroicum.de
oc.informatik.uni-freiburg.de
www3.psychologie.uni-freiburg.de
ad-websvn.informatik.uni-freiburg.de
wolke.fdm.uni-freiburg.de
yourls.ub.uni-freiburg.de
diz-nlp.ukl.uni-freiburg.de
www.metabolism.uni-freiburg.de
rewind.tf.uni-freiburg.de
bwcloud.ruf.uni-freiburg.de
web05.campus.uni-freiburg.de
dhcp.fun.uni-freiburg.de
weather.uni-freiburg.de
www.ilias.uni-freiburg.de
lmegit.ikoop.uni-freiburg.de
survey.vm.uni-freiburg.de
mail.uni-freiburg.de
webserver.uni-freiburg.de
uc-ccxs02.ukl.uni-freiburg.de
intranet.ukl.uni-freiburg.de
u-asta.uni-freiburg.de
ilias.uni-freiburg.de
ckan.anthropologie.uni-freiburg.de
cip.physik.uni-freiburg.de
hugel-wiki.physchem.uni-freiburg.de
uc-cmsdb1.ukl.uni-freiburg.de
alexa.informatik.uni-freiburg.de
www.ffp.uni-freiburg.de
zope-vip1.ruf.uni-freiburg.de
kis-aimapp1-t.ukl.uni-freiburg.de
hdcampus.ub.uni-freiburg.de
mylogin-dev.ub.uni-freiburg.de
stk.ub.uni-freiburg.de
oo.quarep.org
biblio.ub.uni-freiburg.de
chir-syn-03.ukl.uni-freiburg.de
uni-freiburg.de
venus.uni-freiburg.de
git.laurel.informatik.uni-freiburg.de
nuf.uni-freiburg.de
chir-syn-01.ukl.uni-freiburg.de
m5.uni-freiburg.de
www.brainlinks-braintools.uni-freiburg.de
enternix.intra.uni-freiburg.de
accloud.informatik.uni-freiburg.de
mail.stura.uni-freiburg.de
webserver.uni-freiburg.de
sp-sql.ub.uni-freiburg.de
www.umfrage.empiwifo.uni-freiburg.de
fachschaft.informatik.uni-freiburg.de
dhcp.fun.uni-freiburg.de
mif.uni-freiburg.de
www.hydro-lehre.uni-freiburg.de
janus.fachschaft.tf
pcl.physchem.uni-freiburg.de
biom128.imbi.uni-freiburg.de
docata.zv.uni-freiburg.de
biom134.imbi.uni-freiburg.de
webserver.uni-freiburg.de
www.webserver.uni-freiburg.de
webserver.uni-freiburg.de
bwservices-test.uni-freiburg.de
scm-gamma.physchem.uni-freiburg.de
ox.informatik.uni-freiburg.de
ukl-netscaler-a.ukl.uni-freiburg.de
meonas.ukl.uni-freiburg.de
geographie.uni-freiburg.de
fachschaft.informatik.uni-freiburg.de
shop.uni-freiburg.de
dstip.verwaltung.uni-freiburg.de
kis-icw-pat-t.ukl.uni-freiburg.de
www.wohnungsdatenbank.uni-freiburg.de
cci-c3.ukl.uni-freiburg.de
krz-pms-build.ukl.uni-freiburg.de
bfg.uni-freiburg.de
myadmin.ub.uni-freiburg.de
mysql.ruf.uni-freiburg.de
myaccount.vm.uni-freiburg.de
db.fachschaft.tf
moca.phil2.uni-freiburg.de
logik.mathematik.uni-freiburg.de
ad-backup1.cs.uni-freiburg.de
geographie.uni-freiburg.de
peatmoss.plantcode.cup.uni-freiburg.de
cumulus.biologie.uni-freiburg.de
cci-01b-0-1.ukl.uni-freiburg.de
p4test25.uni-freiburg.de
xgrid04.ruf.uni-freiburg.de
mail.bio.chemie.uni-freiburg.de
hugel-wiki.physchem.uni-freiburg.de
wolke.fdm.uni-freiburg.de
www.liquidity-risk.uni-freiburg.de
msm10.ukl.uni-freiburg.de
jip-mr.ukl.uni-freiburg.de

Certificate

The complete raw certificate details for www.hydro-lehre.uni-freiburg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aCPxrvi1iaRMA/2oqKr
tuf8AAkW4m93waLzigYSqwEg36NFtJ4ovhe7K603kQ+e+u8DqWPQwsUoHRi59/EB
k47WT3KCVjcDpeAUGF4/2/FMcp8OnaO7tt6l7i6keCE89k8d0FIA+UYL+dA5I7yl
nlABlOayi6vzKw2VGN4lVL/xQ4DmW4OKp7POeBXp4Ya3Fuc6rERb+3jXFUhLVaaU
a7sAV+mKMFqmmP0BPfnNIiTkU8JjXRJdtYGbQfaaEwMT0WWgw9rjwoTykV7Viy4s
KLcXQLdrx4wgEcob6Y/JizDXG3CWP+LgUqO7p6rma6+tq7mYbYNBtQdkpHslogdC
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49482892414993730605399159108116817166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Albert-Ludwigs-Universität Freiburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hydro-lehre.uni-freiburg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26462981626705893118803416609421437096364744331410548061152191260234807677961524904370206311357063316505255023565247049621950199431616555363026063371434326075377663012174908584409015382306077630525383237838345816893649361654045800033784185377235843140865810377617476917264548604598633047689467112941609816433667912333768879609487408894404224808036263445107959423164575047112967353202902558170718448898113442503230914194400391056344087395609951235195052245780281779467139417814523562853906280443010961736466228312688389486155109915724301187003606114026510582155293221914946648223738579739081233806991170587803274134213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4a0ddf42618004337d8cee33e5a5958afac9e01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydro-lehre.uni-freiburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydro-lehre.uni-freiburg.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00587e61e377950de07c0a0ff67c9b83816b5f247e0ca62e3981dce2550a08c6f3795b4b577b321bc844e3f37fb7cdd02a05416c6febf9668e0568cb194b1d0522adbcd76100ffca06c8bd2b447814aab3e9f0a350910799cfe9fb6196e4be8db41a2ff758b6d61fa2db70f68df1a548b59dacd03e6cda0893dbb678caaa905d45981627bab0ca9fc55ca2dde9dbb67b38543bf46f1a79071343c67231308171661472e7526e01d5549a0c55f98475958c2935297a684425c5797755959c1b11799b7562192e09b7be46c6e1bc7a437a84fd0aa401ae0226708ad58649aebe55ff122d8defef9bb2eebe885f790d76cacec81ce2b19e6425c208e0ef53542a59f0372a7ab8534ddb6a3d8f63c8d24e15ab3cd2e3977b1b0e3dd53872b54d39acc022010a504ebfcbdb132cadf04e1b6b6fde813517f0e2442644d131d88b1952edfec1a9e533b9131f3b2a588ee536a30224aa8a04649d7077a08cafeb61a98a727076f96f66a9d194a37bbf9221d24b7ad1550a49abca646d8f705ef0bb231f35a16591eb1760723258d5c4d189b4ee927d01b6094978124439c8b14612b4d6b96ee00265619420763dceed57ccb674005f1906ae5f11f74ec6349cd53204db37c8ef99c58ac99475827174112a5ef181b7230baaa216e9f2018d8b78f87c3f5ada974670cd9fc771f0b09bc880a42c9d0fc82749e8c603c9109c9143c145759d