vodafone01.secure.lithium.com

- Khoros, LLC -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:1e:2c:90:ca:16:7c:4d:24:3e:5d:c4:84:08:7e:18 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Khoros, LLC

Organization: Khoros, LLC
State / Province: Texas
Locality: Austin
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:1e:2c:90:ca:16:7c:4d:24:3e:5d:c4:84:08:7e:18
Serial Number (int): 20095092739950900998374311111890075160
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4c:f4:ae:3e:a8:16:0b:b2:1d:ed:b4:d9:d9:81:45:fe:44:14:c7:17
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 6e:df:cb:7e:31:1b:04:b6:fe:a4:b8:f1:be:e5:8e:8f:d1:25:20:73
Fingerprint (sha256): 03:55:07:dc:cc:dc:da:31:b3:b1:07:65:d3:c2:a4:54:d9:10:66:d5:48:27:3f:9e:ef:52:70:bb:1f:12:a7:a5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate vodafone01.secure.lithium.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vodafone01.secure.lithium.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vodafone01.secure.lithium.com
*.lithium.com
forum.vodafone.de
forum.vodafone.pt
community.vodafone.nl
community.ziggo.nl
forum.vodafone.nl

Other certificates including the domain name lithium.com

(limited to 100 certificates)
secure06.stage.lithium.com
secure07.stage.lithium.com
secure07.stage.lithium.com
campus.lithium.com
statuspage.io
secure03.stage.lithium.com
secure07.lithium.com
vanity3.lithium.com
ebay01.secure.lithium.com
polycom.stage.lithium.com
secure04.stage.lithium.com
secure06.stage.lithium.com
sane01.secure.lithium.com
secure02.lithium.com
secure06.lithium.com
secure08.lithium.com
amp-forms.lithium.com
secure05.stage.lithium.com
mediasaturn01.secure.stage.lithium.com
secure08.lithium.com
statuspage.io
statuspage.io
vanity4.lithium.com
secure03.lithium.com
secure09.lithium.com
campus.lithium.com
secure01.preprod.lithium.com
statuspage.io
secure08.lithium.com
secure05.lithium.com
sane01.secure.lithium.com
secure06.lithium.com
secure03.stage.lithium.com
secure02.lithium.com
secure08.lithium.com
ak-att01.secure.lithium.com
secure08.lithium.com
statuspage.io
secure01.lithium.com
secure03.stage.lithium.com
secure05.stage.lithium.com
secure01.lithium.com
secure03.lithium.com
secure04.lithium.com
secure02.stage.lithium.com
secure04.stage.lithium.com
secure04.lithium.com
bmw01.secure.stage.lithium.com
sane01.secure.lithium.com
bosch01.secure.stage.lithium.com
secure04.stage.lithium.com
secure02.stage.lithium.com
secure06.stage.lithium.com
kvoqx44227.stage.lithium.com
*.socialweb.stage.lithium.com
duamz84957.lithium.com
ekzqi67577.lithium.com
vodafone01.secure.lithium.com
secure07.lithium.com
secure06.lithium.com
statuspage.io
secure07.stage.lithium.com
statuspage.io
secure06.lithium.com
secure03.stage.lithium.com
secure04.stage.lithium.com
secure03.lithium.com
secure05.stage.lithium.com
secure04.lithium.com
wpxey54623.lithium.com
secure01.lithium.com
bmw01.secure.stage.lithium.com
statuspage.io
pvsmt99345.lithium.com
secure02.stage.lithium.com
secure01.preprod.lithium.com
secure02.lithium.com
secure01.stage.lithium.com
secure04.stage.lithium.com
statuspage.io
secure02.lithium.com
secure05.lithium.com
statuspage.io
vanity3.lithium.com
google01.secure.lithium.com
cdapi.lithium.com
secure06.lithium.com
statuspage.io
secure03.stage.lithium.com
secure07.stage.lithium.com
statuspage.io
statuspage.io
secure07.lithium.com
secure06.stage.lithium.com
secure08.lithium.com
ak-google01.secure.lithium.com
sane01.secure.lithium.com
statuspage.io
statuspage.io
mediasaturn01.secure.stage.lithium.com

Certificate

The complete raw certificate details for vodafone01.secure.lithium.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA7f3IbTwyeGVJBYyH7h
viALcqt2/aZ1+DrIqJzhCZ3q7q3pu7U/nkfVenHjr+avke/bHW0SBj7fsuVGpxVm
7hboS7o7mMWCDJEYcQN39iiHDuwZ6bGFVOByjJn/ByEQKPKnGWzXqFlyHacJ14ZX
NZOHnkm61x4MqPUgC5T9L+UG/rMKy9ZD6u8l1Q9IK47uwa+73V4qpiGfQhjxmvom
eoCDBP0TKYXBD9C2KDQEsbDOCidwWQLPT4g3Dtdv0y+UqmyIn9mCFcDQonSoRTbL
Rp/9FStnTlxj9t/O33b0zmmpOOC/K2N1QfYZTHV3Rj6Mh1T5w2iMfj9WohnAS4Ek
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20095092739950900998374311111890075160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Khoros, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vodafone01.secure.lithium.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23740136202588124211023209629305873816468168676825395429608310214598374421333244879294714992804266330318279772725665080106688593641433686187715326251951834309575914863122395508238419134909548676256584299806005223230450428177283540415439502520834478438735996815426818958452082327327914473214040999042745145390856593975445351094402621386849063707896131857352167089415808514229477643893993342499744249237203235848502053122696991252038098641906623853675548796874423756523153096292000202986697641657912887386459917583423498290460957870998541940142741820426642047537015005110549949947573245932285198448343755005470330397949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cf4ae3ea8160bb21dedb4d9d98145fe4414c717
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodafone01.secure.lithium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lithium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.vodafone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.vodafone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.vodafone.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ziggo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.vodafone.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000df850f11faf59d8303a9f1058bc3cd5d7ce9d3622b232ec3b18c14b79551c9202c59b4f57e6e490c876e3d5a36b78f382250a5cd02fd0b1a7489e80de0b2e42990da50d5aa5253d45e4e5467e84d0318a535e9853d62e435bb9e56b7396486a8b2de71d5771bb3a06ad9b814da4f8daf7e4bbdb4f9cc6d2a2f4ba058f29e29212a35642c1568e88218a80192f81c6da54872b4fcf0a63609d20c4c65539ebe66bf24d81736acbb81110a1172838f2ab3f313e7809c769dccc909d48033417379ec22dff101263c2abb5ed8881f03fcb323a70add6fbd087da77624b7fb913302856ce7ea1f7c277a57fc49914619aa1e89ca1d6016b84868a6281c3cd49692e