fa-epartner-my.greateasternlife.com

- Great Eastern Life Assurance (Malaysia) Berhad -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:cb:e4:7e:fd:69:d2:f8:3d:bb:2c:7b:61:4a:9f:d0 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Great Eastern Life Assurance (Malaysia) Berhad

Organization: Great Eastern Life Assurance (Malaysia) Berhad
State / Province: Wilayah Persekutuan Kuala Lumpur
Locality: Kuala Lumpur
Country: MY

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:e4:7e:fd:69:d2:f8:3d:bb:2c:7b:61:4a:9f:d0
Serial Number (int): 5046354700203067977528278017064476624
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f1:a8:79:a8:15:8a:8b:08:ad:54:2b:d9:b7:bf:e1:97:98:ee:b5:3c
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 33:92:5d:98:6e:ea:47:39:69:a4:7e:f2:63:d2:2f:ce:1b:c1:e0:d0
Fingerprint (sha256): 06:6c:e4:f2:22:f2:b2:fb:96:5b:98:71:a1:fe:22:99:ae:16:55:79:59:7d:ee:32:5f:e6:1b:a5:0e:58:5d:f0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate fa-epartner-my.greateasternlife.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fa-epartner-my.greateasternlife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fa-epartner-my.greateasternlife.com

Other certificates including the domain name greateasternlife.com

(limited to 100 certificates)
www.greateasternlife.com
imperva.com
imperva.com
sso-mymob.greateasternlife.com
upgreat.greateasternlife.com
internal-brandportal.greateasternlife.com
imperva.com
exchange.greateasternlife.com
econnect-my.greateasternlife.com
brandportal.greateasternlife.com
esso-sgmob.greateasternlife.com
aemportal-staging.greateasternlife.com
tracking.csd-my.greateasternlife.com
sso-sgweb.greateasternlife.com
ge-assess.greateasternlife.com
groupinsurance.greateasternlife.com
app.greateasternlife.com
imperva.com
mst.greateasternlife.com
tracking.digital-my.greateasternlife.com
greatlink.greateasternlife.com
secureapp-web2.greateasternlife.com
ge-assess.greateasternlife.com
econnect-id.greateasternlife.com
mpos-my.greateasternlife.com
imperva.com
greatlink.greateasternlife.com
lw-int.greateasternlife.com
greatactivity-uat.greateasternlife.com
cfecampus.greateasternlife.com
fa-epartner-my.greateasternlife.com
ebhub.greateasternlife.com
lifehubapps.greateasternlife.com
ais.greateasternlife.com
fa-epartner-my.greateasternlife.com
bsc-ext.greateasternlife.com
greatactivity.greateasternlife.com
go.greateasternlife.com
tracking.greateasternlife.com
exchange.greateasternlife.com
esso-sgweb.greateasternlife.com
newrep-cfecampus.greateasternlife.com
tableau-gelm.greateasternlife.com
imperva.com
securemail.greateasternlife.com
ulapiapgr.digitalsign.greateasternlife.com
CBJ01-T0-LB01.greateasternlife.com
GELS.FATCA.GREATEASTERNLIFE.COM
tracking.digital-my.greateasternlife.com
sso-sguweb.greateasternlife.com
exchange.greateasternlife.com
app.greateasternlife.com
go.greateasternlife.com
mylamp.greateasternlife.com
app1.greateasternlife.com
filegateway.greateasternlife.com
greatadvice-gels-sg.greateasternlife.com
supremecare.greateasternlife.com
greatactivity.greateasternlife.com
filegateway.greateasternlife.com
sso-mymob.greateasternlife.com
greatidsgfindexsign.greateasternlife.com
tracking.csd-my.greateasternlife.com
synergeoffline-sg.greateasternlife.com
sso-myuweb.greateasternlife.com
uatrewards-sg.greateasternlife.com
imperva.com
imperva.com
tracking.csd-my.greateasternlife.com
cfecontent.greateasternlife.com
giexchange-my.greateasternlife.com
giexchange-sg.greateasternlife.com
epartner-my.greateasternlife.com
rep-admin.greateasternlife.com
erecruitment.greateasternlife.com
imperva.com
pos-vn.greateasternlife.com
tracking.affinity-my.greateasternlife.com
e-sso.greateasternlife.com
imperva.com
imperva.com
tracking.greateasternlife.com
imperva.com
domains2.clickmeter.com
imperva.com
apiuat.greateasternlife.com
bancarome-gw-my.greateasternlife.com
uatrewards-my.greateasternlife.com
GETB.CRS.GREATEASTERNLIFE.COM
imperva.com
imperva.com
mylamp-cfecontent.greateasternlife.com
fpms-id.greateasternlife.com
sso-myumob.greateasternlife.com
glsexp1.greateasternlife.com
uat-bancarome-gw-my.greateasternlife.com
api-geapp.greateasternlife.com
document-uat.greateasternlife.com
imperva.com
securemail.greateasternlife.com

Certificate

The complete raw certificate details for fa-epartner-my.greateasternlife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVhTIXz+kGbOWUnwjCfX
wPus7SB+l99DAxQou7Xm/uuJxrrn4Z5zxEvks05NIrCcMY+7PO+iSKMO7p14mrrR
Ka8Lqtczdct9qH1jvtg46rHrkv+5lsL0BP7UXR0dNVELBP1HQ8lyMJXkZ6tuDukK
V6s0tbhqDSGxdh8/eOox76ERaj2cy1tyXkbJdi6VP/Lm98v4TIDTprqVy5kkCHa4
OzxFX/30D9ljh27Muk6pdgluH5TxyVPNPqA0o5FF6goSMJATdsusNacqI/8u+Cqj
g0odwdkUozn+Rq897P7I5ZdzsVyN/3/qIliLCtSrVDtxrJIQQcqRcQ+Ekhk3lNZc
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5046354700203067977528278017064476624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilayah Persekutuan Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Great Eastern Life Assurance (Malaysia) Berhad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fa-epartner-my.greateasternlife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21882781306663293399849996728646095378919236983973054210347371011261700005275901943994403445136844819848844429665979312226954708943935077378529889713118546855331517916808804626194744385900171652331564142550706459834811558475550421537133161497030205100990165747850748212406260598682657371105599325941947055649552451157217009367226715215629902971971310809072399155277510063953758462705691644462264625258448022973435732077840618772109717088473580828755039724395587877132825637076397074893008236519378234958280890880002222975251878859176219988004401534911285196877768238836566161207397343079237006609007063060990878178543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1a879a8158a8b08ad542bd9b7bfe19798eeb53c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa-epartner-my.greateasternlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a16eaacd4586c4f3a304719d28c8525c9e623bd3e6b70a6078e63dc40681341ca15374bb473801916842bc41bfbd6520d87b4628b6230f2289827d7cf1a95b97912c5765d42b794c2a61fbb60db33ce0f5f14baf6589ee1058dcfcf99ffce229926bb949d518da4afd97b6e255af47e8290298ec7dfafdcf4c9b4ea6abfafed60c8d681dcffd597442f81feeb42d6e2c2cf3a4dee862b1e55c5c5a0aa025997914fd518af320767cfdc4d2d4a87fdde7cf68dbcbaabdf9931a89cdbe0bbb8e73c40f7b3898501c4009e7692db668c0b851f5f71777155efe35754f3ee3e1228939a02f2843a4ba8925aa1ce5a785fe239fa881c863c4adb12ab73e58cf7e68a