tycho.usno.navy.mil

- US Naval Observatory -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:59:cd:d3:f2:94:14:2a:31:8b:ee:4e:e2:46:5d:95 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

US Naval Observatory

Organization: US Naval Observatory
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:59:cd:d3:f2:94:14:2a:31:8b:ee:4e:e2:46:5d:95
Serial Number (int): 12429341068659270241017208530262187413
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:46:b6:be:55:f0:4a:5c:0c:2d:a4:67:bc:c2:2b:36:cd:23:75:6b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 12:ba:67:98:f6:66:26:4b:98:3b:78:77:5b:a2:23:4d:a5:97:ef:60
Fingerprint (sha256): 03:68:e1:d9:a0:3c:1c:4b:f1:8f:fc:35:a7:77:1c:eb:aa:03:5b:04:93:26:d0:f9:c8:09:dd:c7:b9:9b:71:1e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate tycho.usno.navy.mil

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tycho.usno.navy.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tycho.usno.navy.mil

Other certificates including the domain name navy.mil

(limited to 100 certificates)
pmohq.nmci.navy.mil
mysites.scms.navy.mil
ux.dontracker.navy.mil
ep6.erp.navy.mil
nhhc.collections.dc3n.navy.mil
www.housing.navy.mil
simdis.nrl.navy.mil
j2.anchordesk.navy.mil
rdais.platform.milcloud.mil
soatest.navsup.navy.mil
gfmosd.ffc.navy.mil
sftp.ncsc.navy.mil
preprod.beta.np2.navy.mil
rom.usno.navy.mil
stats.nel.navy.mil
opnavqa.ahfq.nmci.navy.mil
cwaybo.sscno.nmci.navy.mil
citrix-sson-session.ablcda.navy.mil
C27PD2CNLAP14W.ahds.nmci.navy.mil
applications.ahf.nmci.navy.mil
C27PD2CNLAP15W.ahds.nmci.navy.mil
vhexpressweb.navair.navy.mil
wtstaging.navair.navy.mil
*.navy.mil
vhweb.navair-rdte.navy.mil
www.lisseis.navsea.navy.mil
test.ide.portal.navy.mil
ile-lms-adelws.nko.navy.mil
netcentric.spawar.navy.mil
www.navyband.navy.mil
columbo.nrlssc.navy.mil
csg.navairlab.navair.navy.mil
www.navy.mil
ssd1.nrl.navy.mil
www.navy.mil
widjit.navair-rdte.navy.mil
mydev.navsup.navy.mil
www.marines.mil
aux-qa.cetars.ncdc.navy.mil
grl-ctx.netc.navy.mil
www10.nemoc.navy.mil
ciif.nrl.navy.mil
app4-p.nde.navy.mil
homepages.navair.navy.mil
web.tsb.cranrdte.navy.mil
smmisqual.submepp.navy.mil
survey.jag.navy.mil
nll2.ahf.nmci.navy.mil
bumed-smartdev.med.navy.mil
www.cotf.navy.mil
waspweb1.navair-rdte.navy.mil
www.navy.mil
inavywildcard.portal.navy.mil
apps01.onr.navy.mil
gosnet.navair.navy.mil
www.nescdw.navsea.navy.mil
airworthinessbetared.navair.navy.mil
pdmurdg.aw3s.navy.mil
test.ide.tce.navy.mil
ogconline.navy.mil
pki.navfac.navy.mil
stg-web1.mfom.nmci.navy.mil
locker.private.navyreserve.navy.mil
staynavytools.bol.navy.mil
mrrstestwebsrv.sscno.nmci.navy.mil
nrdwtest.navyreserve.navy.mil
www.defense.gov
gss.navair.navy.mil
windchill.chs.spawar.navy.mil
projects.cmf.nrl.navy.mil
bathcitrixgw.peosnap.navy.mil
vpn.nvspdren.navy.mil
dencas.med.navy.mil
IATS.NMCI.NAVY.MIL
www.navy.mil
airwatch.navair.navy.mil
ossp.eu.navy.mil
cyberspacece.cnrc.navy.mil
www.navsea.navy.mil
doors.chs.spawar.navy.mil
C27NMDCNLAT1W.AHDS.NMCI.NAVY.MIL
www.navsup.navy.mil
www.ssp.navy.mil
tycho.usno.navy.mil
www.navy.mil
nodcam-qa.ncdc.navy.mil
qawebserv9.navair.navy.mil
www.bol.navy.mil
www.aas.prod.nel.training.navy.mil
mrdbws-dev.nmci.navy.mil
inavy.accessrequest.portal.navy.mil
nmpbsoam1.n10.npc.navy.mil
erms.navsup.navy.mil
geonet.chs.spawar.navy.mil
Paxcoi.navair1.navy.mil
nefp.bol.navy.mil
ipdm.navy.mil
spider.dc3n.navy.mil
wepp.bol.navy.mil
iraps.nmci.navy.mil

Certificate

The complete raw certificate details for tycho.usno.navy.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfm0IvvgS3jKGHUk6Jeb
BN+of0G1LZ/o/2CeV42lKcD204eVN/2v+q3kJhlTXJBd40I1c9etfcHXOhj9AClT
AejupQqWU+k1NkKQqeAVTKRsXV4LYM+uK+wYvmCvrWzaKYRJsMKkt4s7f8OSKOoB
ey9azBjKOLPcvHIzzS2jTkO2sU4XOAkhdK7b11bq+wQfd9eh5QH+AE91kU8dJVpt
EqZl6OPjBTxLEohviLqt0kYb2OnrjcJae2bl520yzw7DejmZJExfWtBS++NcxukV
xAbA5Gt3QbbBIVDzFnx2hYouXAkSFhXnw7VZmmx2FHejZYTuZRsMDtzg91KJSfvd
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12429341068659270241017208530262187413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US Naval Observatory'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tycho.usno.navy.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22972266662263746427712322931662531385819137541069461067201670189213239154402062281556996344577984929961443220070650896455032345386721725268162563077756621991389369485467016339092327733217139112816726760787645430263323278936788581739229506823525547786405959601681349925981248301718560634262071828841052283388730805575340337504821330053610341349914254723528484089462087830864601638869439973645230654811288238511014912019955787099765732860569068887525899560904903251261131345122666477913201768939365640006571002036559932045443449193646526332475343699935330186463395072866071214304041282116693525415438574875775329885469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b46b6be55f04a5c0c2da467bcc22b36cd23756b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tycho.usno.navy.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d8c0f687bec2c43ab99e8c11449d4a069db4d83dc6d0e39f6cea3ef8c9bba42acc7f4350ae4d0f535f05094ebd0bfb4b8b8e08b03700e794698bb60dc90961b525e0d35483573973f9311fe1e78a5004e4273c0846fb033cba561c39f787a2692013f6f98fa8b79e7f57e8e34312688e1afead4268b4d7065e9831776dbaad452de17a576cc537101b423410d0c75b772d72b352a4c70bcc7a976803eaf2f5ca0e8b5617dcdaa8722abde1d59af0873f106e838b558e4b94c2b83301430e23b221e3f6ac151a5fa0b895533c5e5946ddc0bcfb210cf50b92b45ab09a876bab98ad2d7a4cea0507c65c8fa1369d48deda301fa7a0e0f809dcd2c6e18f23d8a79d