research.ugent.be

- Universiteit Gent -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number b1:c5:28:b5:d3:bd:25:a0:a3:2c:78:be:8a:b9:ba:dd was issued on by Sectigo Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit Gent

Organization: Universiteit Gent
State / Province: Oost-Vlaanderen
Country: BE

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b1:c5:28:b5:d3:bd:25:a0:a3:2c:78:be:8a:b9:ba:dd
Serial Number (int): 236297063437273033438464217640257305309
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5f:2c:6b:52:7d:a0:98:97:6f:98:93:04:45:30:5d:e5:30:d5:10:fd
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): ce:0e:81:b7:5c:90:95:02:e5:13:e2:8b:93:dc:0e:2b:77:28:9a:70
Fingerprint (sha256): 03:5c:fb:b6:e2:33:84:4d:1f:d8:53:a7:15:af:48:08:bd:20:f8:ba:15:46:1b:87:60:15:3f:ad:f3:ed:40:2e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate research.ugent.be

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for research.ugent.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

research.ugent.be
gapp1.ugent.be
gapp2.ugent.be

Other certificates including the domain name ugent.be

(limited to 100 certificates)
uchido.ugent.be
neruda0.ugent.be
we12s008.ugent.be
jira-student.atlantis.ugent.be
bioit2.irc.ugent.be
openuniv.ugent.be
www.quantum.ugent.be
www.miam.ugent.be
dresearch.ugent.be
diwdev02.ugent.be
idlab.ugent.be
otrsdev3.ugent.be
oauth.ugent.be
tropius2.ugent.be
lcp.elis.ugent.be
cp0581.irc.ugent.be
www.payment.ugent.be
qresearch.ugent.be
ssophp.ugent.be
schamper.be
laxness.ugent.be
vtctools.ugent.be
ingest.prd.opencast.ugent.be
qexr.ugent.be
accounting.ugent.be
login.ugent.be
www.gemane3.ugent.be
sharelatex.elis.ugent.be
www.insep.ugent.be
www.tussenblokenblad.ugent.be
bumps.ugent.be
plato.helpdesk.ugent.be
www.yaw.ugent.be
www.corpusvgt.ugent.be
plan.opencast.ugent.be
eyaml.qas.rad.ugent.be
paoweb.ugent.be
naos.ugent.be
ewp.ugent.be
www.omeka.ugent.be
gaspar.ugent.be
imanema.ugent.be
getrecruited.ugent.be
sapv11.aps.ugent.be
www.ictoprd.ugent.be
e10kdom2.aps.ugent.be
metals.ugent.be
fkserv.ugent.be
mssmall.ugent.be
*.psb.ugent.be
eqtis.ugent.be
sapv03.aps.ugent.be
www.waves.intec.ugent.be
authorship.ugent.be
adfspoc.ugent.be
www.dictwiki.ugent.be
adt1fs.ugent.be
wina.ugent.be
www.songstudies.ugent.be
alicere.ugent.be
straling01.ugent.be
jusprd.aps.ugent.be
prd.oasis.ugent.be
grinhog.ugent.be
nagila.ugent.be
qa.opencast.ugent.be
qas.oasis.ugent.be
kobobw26.ugent.be
www.evalisa.ugent.be
www.vrijstellingen.ugent.be
ai.ugent.be
ipilxd2.ugent.be
s2b.ugent.be
www.grieks.ugent.be
gift.ugent.be
geoviz-proto.ugent.be
disbiome.ugent.be
yaw.ugent.be
zephyr.UGent.be
www.sms2018.ugent.be
iomics.ugent.be
athenax.ugent.be
remosa.ugent.be
tokyoap2.ugent.be
cepec.ugent.be
www.linghentiandoctorials.ugent.be
we12s008.ugent.be
tgismo.ugent.be
epurse.ugent.be
ihodp-prd.ugent.be
www.livesintranslation.ugent.be
redcap1.ugent.be
www.lct.ugent.be
uforatest.ugent.be
www.welkom.ugent.be
dev.dbbe.ugent.be
wachtwoordservice-tst.ugent.be
qoasis.ugent.be
www.scripts.ugent.be
www.tic.ugent.be

Certificate

The complete raw certificate details for research.ugent.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 236297063437273033438464217640257305309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oost-Vlaanderen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit Gent'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'research.ugent.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830409078503816177665334158124710123559722688227390419948364938544495686126625700131621806151297728807958187777149993166532659787510181189045559292538072942363118502117338188913254837807416665252220333268613829255292586923546904134144602031705305523336550843801652925799928566809663752531634720046708978831544913110825972162098050627104589463742305114075318717213778448270718617984203889515767600849374648817046076169604360179528836826526008588880531846724217749836020228459257597417993013501067099346169100702642779364376498612599746152208996380284330847353051915699985687190891701798378097683317482255385278178549112903695430517806264781301485005208509576240136934608254041188374918074859553090554239507667685118661321430482374555059344707340677726155189448991125126759722507872166126287827149251594387989353456506536838793510405087726967617083019761704508792979297609184058092144910242969526754661422189327236425281341887387882126904294012146502917042562103951573551886873101278442576332748173942282449522352677856531257586497840903761732082786042029931793338543461130456611265038729307666131571775435187256536923553071725848398335390859443012732609145085417145535365147198772109019010107548347863154026072252175155157579866022301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f2c6b527da098976f98930445305de530d510fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018601f11d2b0000040300473045022054f59228541152e8a0066bf040b9b300ca904bd7eb1224a7a363bdd1f75e59aa022100f3d6742b527ec2d55efc4226a350b7742bbd0cc2366c9259e3f5e4b5630a8f55007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018601f11d2c0000040300473045022000f3374f5b163abce2dd40a0255038bafff0dcf2de9aca6a65aed7b5638a076f02210098eda8ff8088a140d576db0fa02a04c99a262378fd31567e3fae414287d1958e007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018601f11d0b0000040300483046022100c162c4a1bba39ed5fd1cad08ed2f063092e58318d088ed5d5ce886891b2f10180221008737793afe9d382a9857d407cf068c256547621f34d6da34ea46cf71d09a49ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.ugent.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapp1.ugent.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapp2.ugent.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d349a673ca72c8da382b8684d1727087a3366dfbbb68ca55394bfcdaf760c31dc0e574292d1908fcc7587d6a39cfa12e63728778c78aa4504a5702357699de1bade4083f03b450ca21357d8497cfa23ca20c93b3cd23f9498043ef434a1ae82f856173bc02b8b140387b61e923053e0f0c5498af7ac4df303d901966a6e970a23d34c27b7144b3c24d26dbe3e198709222f0f9ee17c32e3f52e4fd89fd8d5e58aca3ac7363c298595465eac313bfc9a2b76a71ed24a036b113e498e68a8d7d7798a42d83eabe0bd1a4a8b4e74b8c58f844b12b41ab2a9fdd5b97a57016cf478b711b6f14a7f00bf03499ba02fde8d74e926c2203b568f1e9e02eaeba253a937