nala.intern.ekom21.de

- ekom21 - KGRZ Hessen K.d.oe.R. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 46:0a:d6:9f:3a:20:70:e1:35:c0:53:c0 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ekom21 - KGRZ Hessen K.d.oe.R.

Organization: ekom21 - KGRZ Hessen K.d.oe.R.
Organization unit: IT-Operations
State / Province: Hessen
Locality: Giessen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 46:0a:d6:9f:3a:20:70:e1:35:c0:53:c0
Serial Number (int): 21677053469338414692402484160
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: dc:d2:e7:14:c8:36:01:f9:b5:cf:da:3d:45:00:32:49:1b:13:70:ab
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 00:6d:e6:a9:cc:08:38:f3:e0:8a:83:90:78:d6:3b:25:b5:d6:dc:f4
Fingerprint (sha256): 03:22:8a:2a:8e:5a:bd:f5:49:70:e3:7e:0e:ea:5c:ef:a4:34:01:57:ff:a2:b8:c3:24:e1:8c:a2:41:a7:71:c2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate nala.intern.ekom21.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nala.intern.ekom21.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nala.intern.ekom21.de

Other certificates including the domain name ekom21.de

(limited to 100 certificates)
*.rwf-prod.intern.ekom21.de
memcg.ekom21.de
openwebfm-khr.intern.ekom21.de
*.ekom21.de
portal-civ-test.ekom21.de
domicil21-mz.intern.ekom21.de
nala.intern.ekom21.de
wkz.ekom21.de
wlan.ekom21.de
portal-civ-test.ekom21.de
ecm21.intern.ekom21.de
domicil21-mz.intern.ekom21.de
kis.intern.ekom21.de
webmail.ekom21.de
vvd.ekom21.de
hedocsv37.intern.ekom21.de
aqb.ekom21.de
oos.ekom21.de
owi21togo.intern.ekom21.de
adt.ekom21.de
loga-bd-prod-lai.intern.ekom21.de
*.rwf-qs.intern.ekom21.de
civ-hel.intern.ekom21.de
webkita-zelv-qs.ekom21.de
*.ekom21.de
civ-demo.ekom21.de
pushint.avisca.ekom21.de
bpm21-test.intern.ekom21.de
secure.ekom21.de
votemanager-hessen.ekom21.de
efinanz-oze-qs.ekom21.de
efinanz.intern.ekom21.de
www.ekom21.de
curalit21.intern.ekom21.de
portal-cor.ekom21.de
hcme01.intern.ekom21.de
kis.intern.ekom21.de
vois-ekom21.intern.ekom21.de
portal-civ-qs.ekom21.de
stellen.ekom21.de
xewo21-webservice.intern.ekom21.de
gewerbe.ekom21.de
ecm21-qs.intern.ekom21.de
ema21-webservice.intern.ekom21.de
hcmc01.intern.ekom21.de
*.ekom21.de
fe21.intern.ekom21.de
gnhdbv3.ekom21.de
dms21-kil.intern.ekom21.de
adt.ekom21.de
rim.ekom21.de
bpm21.intern.ekom21.de
adt21qs.intern.ekom21.de
www.shop.ekom21.de
domicil21.intern.ekom21.de
ozg.ekom21.de
zeit21.ekom21.de
domicil21-mz-qs.intern.ekom21.de
portal-civ-hel-qs.ekom21.de
citrix.lwv.ekom21.de
esina21.intern.ekom21.de
fe21.intern.ekom21.de
civ-hzd-qs.intern.ekom21.de
portal-civ-hel-qs.ekom21.de
kundenzufriedenheit-itops.ekom21.de
webkita.ekom21.de
zema21.intern.ekom21.de
teamsites.ekom21.de
prm21-qs.intern.ekom21.de
antragsportal-fm.ekom21.de
migewa.ekom21.de
fe21reports.intern.ekom21.de
zaehlerportal-civ.ekom21.de
owi21oa.ekom21.de
kai2web.intern.ekom21.de
loga-bd-prod.intern.ekom21.de
fernwartung.ekom21.de
owi21oa.ekom21.de
kis-dev.intern.ekom21.de
vois-spiegel.intern.ekom21.de
zema21.intern.ekom21.de
zeit21.ekom21.de
ebot-qs.ekom21.de
sozabis-anwtest.lwv.ekom21.de
portal-civ.ekom21.de
citrix21.ekom21.de
webmail.ekom21.de
tevis-qs.ekom21.de
dvdv-he.ekom21.de
zda.intern.ekom21.de
zeit21-qs.intern.ekom21.de
prm21.intern.ekom21.de
logaweb-pro9.intern.ekom21.de
civento21zm.intern.ekom21.de
*.ekom21.de
fe21-qs.intern.ekom21.de
owi21oatest.ekom21.de
owa.ekom21.de
owi21v4-qs.intern.ekom21.de
votemanager-qs.ekom21.de

Certificate

The complete raw certificate details for nala.intern.ekom21.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgzWxwiTfwTWO8GqtQur
mz8eMciItrmvbA04/Kqu4nqXA5wbYoSfCTO8NZoN4an86dVYV5xtn9n0obKSnktq
yacZvZ0/LxId2OIL+gJeTXknPrdyEsuUnfoVt4jPKC0b6lJMxewIrZD5guXZ0487
kPm/ibwznJAXjxvz59a8/P37cwr1CUXB/Z9TYH+Qt/5vZJ7ukX+FJ35kbQJu4C0/
dVPNo3LKAxbXOJgCkCV6qNTNthQZsUcQxamTBzKn/Skw5XXQTw4qmUG/3NlgwGOO
0QzbLUQFDtershTkeSrAq803wRlzVeH5UUoPIjB6q335m9+2lvw5Fpf4y/SYRcI0
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21677053469338414692402484160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 16:16:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-20 16:26:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Giessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT-Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekom21 - KGRZ Hessen K.d.oe.R.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nala.intern.ekom21.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24496562297710960069280176311032622771027693881717511508253788065469454729053134299430256778817579600902462793540623737167091991946408379907872549203377985997769666389265625118938248542472753172636083899387171429131006119022269377776257486124224431439083684968197596597780491073445425696035433085170397941977339921339394646718854498227171800930703789673474578387481957711977758560273128596005956266503819770529230478168027702898284107339155920676316327244165377730028727798573503527177175356341988164209581034467755851039387150718818239551208312059847524375197116180087287065918189657447449326673467335801579845596189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nala.intern.ekom21.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcd2e714c83601f9b5cfda3d450032491b1370ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00585d0f717228f065241071dfa313658804a0e481b4002b7ef98870d3773f57512a00c4b09569af966fa83d5449c1d4d870c47bb0e2b4fe164d2bd1795c1b7db9e2749caf8d7b4c241e04cace578f85c080348c107b57e9654fd7075115ce083708933d2b0aa12cfd3fb108ca43f7dce20386763019fd4496f979d47b58d512e3897ec826ca9c3c65deba2a1a692fb939097610843d32b83c079c9c4758e11b45aa1677c509acd5d0f58dcf6676cf839d19d1f87d514c5346c050a417dbf37fcaa861c5d74b14e101dc304d0d112cf08afa3afea8bf3a51f3a7f4947428e8adcb56981ece5c6c6da53c4a25ad56e57585dfac2cf1b98844e685e64a010df2a2cd