qa-sit.hub.lenovo.com

- Lenovo (Beijing) Limited -

Issued by Secure Site Pro CA G2

About this certificate

This digital certificate with serial number 0d:62:15:3f:be:d4:94:a5:fb:62:73:b2:fb:26:73:12 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lenovo (Beijing) Limited

Organization: Lenovo (Beijing) Limited
State / Province: Beijing
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:62:15:3f:be:d4:94:a5:fb:62:73:b2:fb:26:73:12
Serial Number (int): 17789240018375380650957920885560210194
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 00:2b:66:3d:79:59:b6:c9:78:a4:2b:a2:c1:b7:99:32:a0:66:6d:0a
AuthorityKeyId: 45:41:e3:93:54:70:b8:e9:a5:b7:96:bc:26:b1:58:75:42:97:3e:f3

Fingerprint (sha1): 6c:34:af:5a:3b:0f:f5:c6:f5:e7:6d:8f:29:8a:90:60:d7:ac:1e:fe
Fingerprint (sha256): 03:eb:37:45:e6:f5:a9:33:dc:a6:99:42:e5:4a:e9:a6:63:59:96:bd:de:b8:f1:06:87:21:dc:b9:96:84:88:b5

Issuing Certificate URL: http://crl.digicert-cn.com/SecureSiteProCAG2.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://crl3.digicert.com/SecureSiteProCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/SecureSiteProCAG2.crl

Check the revocation status for certificate qa-sit.hub.lenovo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-sit.hub.lenovo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa-sit.hub.lenovo.com

Other certificates including the domain name lenovo.com

(limited to 100 certificates)
777bpce76.saagie.com
marketplace-templates-vpoc.cp.lenovo.com
777bpce76.saagie.com
*.lenovo.com
displaycdn.lenovo.com
www.maestro.io
activate.connect.lenovo.com
outlet.de.lenovo.com
api-test.tsc.lenovo.com
osd.lenovo.com
cxs.lenovo.com
www.thinkbook.com
geo.uds-qa.lenovo.com
loyalty.lenovo.com
mail.lenovo.com
subaru3-dev.lenovo.com
webform.wd.lenovo.com
*.lenovo.com
io.gdi.lenovo.com
esourcingtest.lenovo.com
*.csw.lenovo.com
testforums.lenovo.com
secure01.lithium.com
lcfc01.blt.lenovo.com
rolandberger.relmeetingapp.lenovo.com
receiver.b2b.lenovo.com
esbclient-cn-t.lenovo.com
mqtt-mtls-load.naea1.uds-qa.lenovo.com
scoe.lenovo.com
secure01.lithium.com
smartalbumcloud.lenovo.com
aployalty.lenovo.com
brazil-mds.lenovo.com
*.csw-stage.lenovo.com
smartedu.lenovo.com
amer-es.tw22.lenovo.com
*.bycube.lenovo.com
sni.cloudflaressl.com
www.maestro.io
*.lenovo.com
cowork.us.owa.lenovo.com
www.maestro.io
*.lenovo.com
oauth.csw.lenovo.com
spokenenglish.smartedu.lenovo.com
aefepl01.lenovo.com
homeedgeserver.lenovo.com
www.maestro.io
*.lenovo.com
stscn.lenovo.com
www.thinkbook.com
qa-sit.hub.lenovo.com
apservicesales.lenovo.com
*.lenovo.com
secure01.lithium.com
*.lenovo.com
log-smart.lenovo.com
*.adminhosting.shea1.lenovo.com
nonprod-idp-xclarityone.lenovo.com
fpvpn.hk.lenovo.com
test.wx.lenovo.com
linux.lenovo.com
brandworld.lenovo.com
*.lenovo.com
lscs-qa.dev.cloud.lenovo.com
suwen.lenovo.com
www.thinkbook.com
dalestatus.mambu.com
www.maestro.io
wireless.lenovo.com
sts.us.lenovo.com
sni.cloudflaressl.com
pages.lenovo.com
status.apoteket.dk
mqtt-mtls.naea1.uds-sit.lenovo.com
sni.cloudflaressl.com
*.resources.lenovo.com
less.naea1.uds.lenovo.com
uds.lenovo.com
analytics.status.atlassian.com
cc20.status.jasper.com
mitest.lenovo.com
test.le-credit.lenovo.com
mcstaging.store.lenovo.com
techworld21.lenovo.com
stscn.lenovo.com
ldiplusstatus.uds.lenovo.com
emea-it.tw22.lenovo.com
*.dev.cloud.lenovo.com
b2b.lenovo.com
mave.dds.lenovo.com
geo.cnno1.uds-sit.lenovo.com
embed-answers.cority.com.pagescdn.com
webvpncnpek01.lenovo.com
tracking.lenovo.com
*.lenovo.com
*.brain.lenovo.com
mfa-test-login.icelab.lenovo.com
cap.lenovo.com
xclarityone.lenovo.com

Certificate

The complete raw certificate details for qa-sit.hub.lenovo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6V57gad2ysV/OoSFNlR
g6tWwxWHZetyzh+Rxy4JKIeNzbx4rIZG/F2O2LGoUqqaIVtsmdKUaETDWsB95w7h
JToBVcni46Kga+MQT4MgG0Bs+6QSAGHdkYdIcm+zRDt0G4NNCNjHnlcFpFkFawQm
aJ6htYnMIBQuttQD1ZbM+/+BVmlSLpoIRb1G1tHm+TQoR+DbLFOoJZZutRlO9woV
yi9SiGWikMfbOmxrR2DJHrj7tdROO3xZra5UggfADuHS7GpwY1yw05BtPE9knZfH
LUqASl0PP2SIXrvX665QiocjnI0bu9v+vcNXwiTuRBgCMaHyQaTJEEARKvaUZG2Y
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17789240018375380650957920885560210194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Site Pro CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lenovo (Beijing) Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-sit.hub.lenovo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21163396328312298194945001315959233229865581965184693416113225397822572352652177669515623656660314207807563264601358351534861810543903518057500995992494455606213180415226026014100713925641449679733198511313469926050442826250755449571044890590104693259168282051232495874981463195275779380086387434703339872874187212548725102436709309214502152654404762392940706930984724477694989878636045005442587063204594149143810590144874607324254455192599764571682254965650914868095865090300359200743985680896258732130997059739823096008490448564864607933118601741496938810867880389883645679339861888917338978761156894660057195452541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4541e3935470b8e9a5b796bc26b1587542973ef3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							002b663d7959b6c978a42ba2c1b79932a0666d0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-sit.hub.lenovo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/SecureSiteProCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/SecureSiteProCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/SecureSiteProCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001847e8bb05900000403004630440220674b5ec04913673773f59b6055229bbc6b776dcb3b3c22611f5b1c94e9700cbc02204383f26f1ddabfd6c69300f75867d26abad74d7e311e38a4ab8f47384644bb1c007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001847e8bb0bd000004030046304402202e888671bb844f27579c95d0330204a528e343c822b0309f580f67dab5a225480220623ed0b4f8006c0992fdc0f8dabc5486dff716c3698427f77a9a2cf32aba36c9007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001847e8bb0730000040300473045022100a1816aadce287e6b1ada6b5cbe5b5fe254bbf0e3e24660e4b4340c2e66f76c79022058f16ceb27aa7227e5bac6a43515bdd6b1792926c7598c4f764895e9497d71d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0092fa38ac28a9da0d7ae537264ffff07636b3d070c5f985ae8da16487e297b23d45bac0c73c261521655df4aee7a2236b8e53064b2147d48bdfeb1a64ec1840540a6722a7254560f3fac58915ea92a9d035eb643e6dd9abaecba34a111dbcb5b9d00f073669fd5f73c30e4b31fc2d690811b4e07d2efef306656c603ee7d20228ed50e5eb7ef49951702db55101fc33e43464eae1bbb90b3e7b4fe6c109b8fa62cc8434633ebd6a84298b8b8428d15b1f11b230e53fd1af4b3d39a07e2a9778d6f4286b2faa8773d9be7a17df2036bc6bfe1c891d4f829a1c59cbfee5ac70153215355679f59f0612dc1b84e3deeb5deac2a5c324c5e7b149222505539ac6390c