opinion.asda.com

- Walmart Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5a:8b:fa:46:cd:7a:0b:2f:16:24:e4:5a was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Walmart Inc.

Organization: Walmart Inc.
State / Province: Arkansas
Locality: Bentonville
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:8b:fa:46:cd:7a:0b:2f:16:24:e4:5a
Serial Number (int): 28022873470546451233283302490
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bd:46:ba:42:16:77:50:a3:7f:93:6d:58:46:3f:76:92:10:4f:33:71
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 8b:25:ea:dd:f1:3c:e0:3c:ec:f2:6f:b0:c8:42:ec:aa:73:66:bf:86
Fingerprint (sha256): 03:98:d7:1a:76:95:52:2e:f3:b3:ab:21:d4:e6:37:7e:45:a4:cf:ed:8e:38:5c:f9:d1:c4:33:b7:f2:36:99:d4

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate opinion.asda.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opinion.asda.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opinion.asda.com
opinion.walmart.com
opinion.walmart.ca
opinion.samsclub.com

Other certificates including the domain name asda.com

(limited to 100 certificates)
connect-dom-cert.cert.hosting.asda.com
connect-mip-cert.cert.hosting.asda.com
S608661SHVW131.sit.hosting.asda.com
prod.asda.com
nonprod.asda.com
S608661RGVW159-cert.cert.hosting.asda.com
prod.asda.com
s608661rgvl479.prd.hosting.asda.com
direct.asda.com
van-insurance.asda.com
i.groceries-qa.asda.com
S608661RGVL464.cert.hosting.asda.com
staging.direct.asda.com
ordertracker.asda.com
homeinsurance.asda.com
gatehouse.asda.com
MQPIB02.cert.hosting.asda.com
vip09-uk-qa-https-web-p-3.walmart.com
lifeandstyle.asda.com
opinion.asda.com
riamoneytransfer.asda.com
MQPFR01-cert.cert.hosting.asda.com
connect-mda-cert.cert.hosting.asda.com
sni.cloudflaressl.com
beacon.walmart.com
your.asda.com
beacon.walmart.com
MQ1SIG01.sit.hosting.asda.com
outgoing-direct.asda.com
groceries-stage.asda.com
connect-sci-02-cert.cert.hosting.asda.com
vip28-i5-ca-qa-https-web-p-7.walmart.com
beacon.qa.walmart.com
san-4-s51.tlsprovisioning.exacttarget.com
cdn.corporate.walmart.com
MQ1LBK01.prd.hosting.asda.com
ccservice-nonprod.walmart.com
corporate.walmart.com
carinsurance.asda.com
s608661rgvl479.prd.hosting.asda.com
prod.asda.com
caravan-insurance.asda.com
connect-cdm-cert.cert.hosting.asda.com
s608661shvl389.prd.hosting.asda.com
business.asda.com
www.int.asda.com
your.asda.com
connect-mda.prd.hosting.asda.com
xi52-optix.cert.hosting.asda.com
migeorge.asda.com
storelocator.asda.com
vip09-uk-qa-https-web-p-3.walmart.com
nonprod.asda.com
asdagiftcards.com
mqigw-lb-vpt.test.hosting.asda.com
development-direct.asda.com
xi52-cert.cert.hosting.asda.com
staging.direct.asda.com
MQLBK01.prd.hosting.asda.com
MQ1DBK01.dev.hosting.asda.com
i.groceries.asda.com
uat-money.asda.com
xi52-cert.cert.hosting.asda.com
beacon.walmart.com
omniture-ssl.direct.asda.com
origin-prod.asda.com
vip09-uk-qa-https-web-p-3.walmart.com
S608661SHVL37D.sit.hosting.asda.com
beacon.walmart.com
homeinsurance.asda.com
MQ1PXR01-cert.cert.hosting.asda.com
priceguarantee.asda.com
BRACKMILLS-dev.dev.hosting.asda.com
vip17-uk-non-prod-https-web-p-1.walmart.com
omniture-ssl.direct.asda.com
outgoing-direct.asda.com
beacon.walmart.com
DONCASTER-dev.dev.hosting.asda.com
opinion.asda.com
omniture-ssl.groceries-qa.asda.com
prod.asda.com
OLLERTON-cert.cert.hosting.asda.com
MQPFR02-cert.cert.hosting.asda.com
travelinsurance.asda.com
xi52-toyou.cert.hosting.asda.com
academy.asda.com
xi52-optix.sit.hosting.asda.com
prod-divestiture.asda.com
vip11-sams-qa-https-web-p-5.walmart.com
MQLMF01.prd.hosting.asda.com
OLLERTON-prod.prd.hosting.asda.com
hsc-mif-cert.cert.hosting.asda.com
nonprod.asda.com
help.asda.com
DOTCOM-MIF-prod.prd.hosting.asda.com
qa-money.asda.com
S608661SHVL374.dev.hosting.asda.com
connect-dm303-cert.cert.hosting.asda.com
opinion.asda.com
xi52-te.cert.hosting.asda.com

Certificate

The complete raw certificate details for opinion.asda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhGozAHFSGtbAqpfXXdD
cVm35yxonlF2Z74NcZyr0FavQqipuiSOZ7Xnsz8KxKeYhLP8hWoCoPcTgANpyUXc
KbtitrPtBcfPcTtfoO1anMYYM6yAgRZ7BeAv2X78eDBR6Nwl9GfHeCnHYL8cf9Si
UMWynzK4djAiu8j9v3k0Zlh0TuxwND8XeZY1Eqr2kOyEVoMLiYFP/EEGnrCcsxjF
q4k/4MFwjuOFHjrdDe3OV4Eoz0gSW9tQHirAE+mmdL0vx8h/PCukDFBHNG0iFS1Z
Vl7FBHgxeQJTs3ie0oGW2nIJWH8VH+p1S9d/Egls2ZcxizadFudd/FDRNwKtSnF3
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28022873470546451233283302490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-20 02:05:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 02:05:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arkansas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bentonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walmart Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opinion.asda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25508845759546529255058586503126712021510262445547860971068636283081518782085190301731830682044983359329164135300046387656253653923459013819204345349263368767331878644957971651271005597027484374505751312717426287091175214941581272203542978066229997771673685087706589952640890380370550947368821156833914326219250785790911201056203593799990852379827350564474297276020307677587627054619419476887274625623094182407268774283702009653263452421055070083360596253407053220740267354976602013648670548397699175372852482980468208467883497423232043132394431309910032719609784584824963422552063323362576471736773787425470336301021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opinion.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opinion.walmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opinion.walmart.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opinion.samsclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd46ba42167750a37f936d58463f7692104f3371
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ca06a55afb704e3948b1f2246da5f8bbc5fd3be1f352105027328725ee56c205cb1b8005e9660f25533ad5db2fee1346a78b14d4f743cba13d033f8feca6e8376cedc51b2d0579c100df1834962ba74005528d993d2f95a9428340226d2b03394f0db4bc5468515071fa486d2245ef285e316e1299b4bf5a571b15e43f30c1b763e33bf48cd1eddececd0dfa63f745987bd2fef6d95b93dfd52934390ff92bca29f6873584762b8b2005d2f9495af10d42243b46cb5bd12ceabc7de8f8aba7b3ffb6436e48707d0343169a20520b568b622a5d7a42519e2de87862400d5b584efb8ab95dd665b5768aa92bcc20fb342b5148481e98399aa80be5a4ebfc56375