ubsrvweb19.ub.tu-berlin.de

- Technische Universität Berlin -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number fa:90:67:fe:33:b5:7b:1c:45:ae:1d:81:9e:db:56:ca was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Technische Universität Berlin

Organization: Technische Universität Berlin
State / Province: Berlin
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): fa:90:67:fe:33:b5:7b:1c:45:ae:1d:81:9e:db:56:ca
Serial Number (int): 333056798922003570596501628361471907530
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ad:de:63:dd:9c:05:5d:4d:da:46:0b:aa:c7:32:09:73:59:0f:cf:01
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): d7:51:c6:d7:bf:e7:de:c4:1f:6b:1a:df:b7:dc:d6:eb:60:64:a9:ec
Fingerprint (sha256): 06:27:f6:91:99:ec:57:d1:e4:34:db:e3:a9:c3:1f:5c:f3:5d:1a:f8:fb:ed:60:b5:e8:83:9c:b3:9f:e9:ae:1e

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ubsrvweb19.ub.tu-berlin.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ubsrvweb19.ub.tu-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ubsrvweb19.ub.tu-berlin.de
conversion.ub.tu-berlin.de
cp.tu-berlin.de
www.cp.tu-berlin.de

Other certificates including the domain name tu-berlin.de

(limited to 100 certificates)
www.dcaiti.tu-berlin.de
f5-nebenblock6.tubit.tu-berlin.de
puma2.inet.tu-berlin.de
www3.tu-berlin.de
video.isis.tu-berlin.de
ubsrvapp01.ub.tu-berlin.de
alex.qu.tu-berlin.de
www.dai-labor.de
f5-nebenblock6.tubit.tu-berlin.de
webident.tubit.tu-berlin.de
www.tu-sport.de
inv.ak.tu-berlin.de
lsf.tubit.tu-berlin.de
uni-flensburg.shib-sp.tubcloud.tu-berlin.de
etherpad.innocampus.tu-berlin.de
www.depositonce.tu-berlin.de
rappsilberlab.org
f2-rd-driess.org.tu-berlin.de
adj.users.ak.tu-berlin.de
uimp-01.tu-berlin.de
ace-hauptblock2.tubit.TU-Berlin.DE
moodle.bzhl.tu-berlin.de
tubit-vbb-01.tubit.win.tu-berlin.de
proxy-tc-02.intern.tu-berlin.de
www.chem.tu-berlin.de
f2-rd-lenz.org.tu-berlin.de
clsw1.physik-pool.tu-berlin.de
srv-peri1.chem.tu-berlin.de
ace-hauptblock4.tubit.tu-berlin.de
serverkneissl.physik.tu-berlin.de
bree.physik.tu-berlin.de
autolab.service.tu-berlin.de
web.physik-pool.tu-berlin.de
ucm-test.tu-berlin.de
ace-nebenblock4.tubit.tu-berlin.de
nubes.bbaw.de
asta.tu-berlin.de
ace-hauptblock3.tubit.tu-berlin.de
ubsrvweb06.ub.tu-berlin.de
rappsilberlab.org
exchange.tu-berlin.de
www.concur2017.tu-berlin.de
view.tubit.tu-berlin.de
ace-nebenblock5.tubit.tu-berlin.de
clsw2.physik-pool.tu-berlin.de
ace-nebenblock5.tubit.tu-berlin.de
vserver1.grundbau.tu-berlin.de
dai-labor.de
ace-nebenblock3.tubit.tu-berlin.de
ace-nebenblock2.tubit.tu-berlin.de
ubsrvweb16.ub.tu-berlin.de
wiki.verkehrsplanung.tu-berlin.de
selfpass.ikm.tu-berlin.de
autolab.service.tu-berlin.de
leibniz-gemeinschaft.tubcloud.tu-berlin.de
intern.sec.t-labs.tu-berlin.de
student-survey.ak.tu-berlin.de
win-dc3.win.tu-berlin.de
ace-nebenblock4.tubit.tu-berlin.de
ace-hauptblock3.tubit.tu-berlin.de
guest41.innocampus.tu-berlin.de
files.snet.tu-berlin.de
gitlab.inet.tu-berlin.de
srv.zfge.tu-berlin.de
viewconserv03.uv.win.tu-berlin.de
shibboleth.innocampus.tu-berlin.de
eb104.tu-berlin.de
www.concur2017.tu-berlin.de
git.ikm.tu-berlin.de
pxe.physik-pool.tu-berlin.de
speedikon-web.svc.tu-berlin.de
pad.innocampus.tu-berlin.de
support.zecm.tu-berlin.de
ace-nebenblock5.tubit.tu-berlin.de
git.snet.tu-berlin.de
voip.zecm.tu-berlin.de
kurse.zems.tu-berlin.de
ubsrvweb12.ub.tu-berlin.de
ubsrvapp18.org.tu-berlin.de
www.events.tu-berlin.de
clt.ak.tu-berlin.de
ubsrvweb19.ub.tu-berlin.de
ace-nebenblock4.tubit.tu-berlin.de
logs.e-relaunch.tu-berlin.de
ace-hauptblock2.tubit.TU-Berlin.DE
ace-nebenblock5.tubit.tu-berlin.de
sichere-stromnetze-durch-monitoring.de
www3.tu-berlin.de
jenkins.dai-labor.de
proxy-tc-04.intern.tu-berlin.de
pam2018.inet.berlin
ace-hauptblock4.tubit.tu-berlin.de
video.isis.tu-berlin.de
hds.voip.tu-berlin.de
ldap-vm1.tu-berlin.de
cloud.tdu.tu-berlin.de
teambe.zecm.tu-berlin.de
ace-nebenblock5.tubit.tu-berlin.de
ns.tu-berlin.de
apt.tubit.win.tu-berlin.de

Certificate

The complete raw certificate details for ubsrvweb19.ub.tu-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333056798922003570596501628361471907530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universität Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ubsrvweb19.ub.tu-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 963696116160663756092677533750218318514588904234421872213089854397918296571166258164012386974029315849827176832155981304198309698823885527854120651287363790022363585140305632151308388154756113827298863251730445220644571526189547113639249092535690256553215521705607115659757524728296005050188004647229520821781569684976577972032207046518678769053715616857341809169007263855387633174957450817846521312546345316687097519039747187590517211690155188757323931918192913264704426563056454715163954515096864345168498412347729852240323828571097598812898049851724304042336154650688382202084523954853528803357331682864322109039666429282616109868023700007131114582462026857295494102831782132563422073275520736951565158682516004719577695178407871086374024090462562697542001931848133567978929254121227572376110968483228821194456066255307694396746339323734630630113209716726728394042100660895851858861502314835392344117961717292591381377703868972252736149594295315769748792713923728013514690202711779735164191114836980294496409766172458285313410566633202565410772332204001734130091856279799475865578949978952876679602933676168036114433666220572470529191582142829936870097902331715289831125222848628568916249383387731334788109442787913149546709402767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adde63dd9c055d4dda460baac7320973590fcf01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubsrvweb19.ub.tu-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conversion.ub.tu-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.tu-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cp.tu-berlin.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00202e96a4a73b2de584157260d66c81cc7c92529d878e52efc796fed58d1ed37c177d4a4fc5304ad980fe041430ce565d64ba712760ee205cf323af6b9bcd7b07e9a0895197534a19cb0798f07635bd5548f9bdb9acf1542889d63425ef17c9ae7ac0c2d34b9266d7bb6f4c9f31eb4b6b629a22c2e6ccac1affd74812a9d81874c8b10a29195f9aaf4dc7bcc325c4f9ded2c6a181d80b975ef640870171e91f4732e50cc434779ba94a139d25e9cbe59db38839cffbe598b9f16fa34fddcce3b515b68ba9fe5aee49392bfb9719bfd95054db803a83cca3262d4490a039013aeeb9164cbf6086e97214904e08eda0ed19ec6caedb585e62467a889a39beb6f6eb62e7b9c7f2901355746847a032f1cb446305a72b08cce0b5f2e5baaf6fb50208d3990974decf87868dc32406525e9dde44c265eb84fa962ca4bb4689d3002929bf85ad5ba5f66c3625ea11c21ef666864f83cc61c747b21294d12916f91ed68f510a217737a9481cb4982b1606a1837fecf4814bde69f9c434176f2c0dc4e0f532820cbc9be433171badeadb6596c679006784239c2a697cbe6ad30a842168e27bcb733944c4736cc688ac33f98c0cd242f0bd776c74503bfe9eac109b288669c240f818464ad002ab0f6c69e3e173e3b64f1f3514f7b90a2db5d8da5f8b58f7bab553fb09611a2626878d2aa03eebea811199aaffb38e8b549c3a1a1b23989d