accreditation-new.belgium.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number b6:81:22:35:81:d7:9d:48:4d:3a:e8:54:53:f3:33:07 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): b6:81:22:35:81:d7:9d:48:4d:3a:e8:54:53:f3:33:07
Serial Number (int): 242589995368809047108816684379763061511
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 98:cd:e9:1b:f9:8e:49:a8:f4:da:d1:4e:d0:ae:40:5e:98:ea:47:46
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): cb:65:ae:49:e8:3c:bf:2e:3a:85:d6:40:11:6e:4e:a9:73:70:ae:0a
Fingerprint (sha256): 06:8c:18:b4:e0:f2:08:86:9b:a9:a8:7b:70:b6:37:2e:7a:e6:09:fd:e4:19:e5:89:33:f0:aa:67:77:3a:6b:f8

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate accreditation-new.belgium.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for accreditation-new.belgium.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accreditation-new.belgium.be
accreditation.prd.excom.fgov.be

Other certificates including the domain name belgium.be

(limited to 100 certificates)
www.venezuela.diplomatie.belgium.be
16-loi.be
www.australie.diplomatie.belgium.be
www.business.belgium.be
5226.web01.f2w.blue4you.be
www.koeweit.diplomatie.belgium.be
wtsvcvic099a.services.gcloud.belgium.be
rma-help.fedict.belgium.be
*.spaas.gcloud.belgium.be
www.japon.diplomatie.belgium.be
2014.jaarverslag.financien.belgium.be
fedict.be
digiflow-mm.ta.belgium.be
support.eloket.belgium.be
www.bulgarije.diplomatie.belgium.be
www.griekenland.diplomatie.belgium.be
*.ta.belgium.be
finances.belgium.be
consular.diplomatie.be
www.jordanie.diplomatie.belgium.be
www.ierland.diplomatie.belgium.be
www.panama.diplomatie.belgium.be
*.adriatic.belgium.be
www.zweden.diplomatie.belgium.be
www.portugal.diplomatie.belgium.be
2013.jaarverslag.financien.belgium.be
bienarrondir.belgium.be
www.verenigdestaten.diplomatie.belgium.be
*.belgium.be
organesdeconcertation.sante.belgique.be
www.evenements.emploi.belgique.be
*.infocenter.belgium.be
www.chili.diplomatie.belgium.be
www.mozambique.diplomatie.belgium.be
finshop.belgium.be
www.ofoifa.belgium.be
bibforum.fgov.be
www.ofoifa.belgium.be
www.oeganda.diplomatie.belgium.be
*.services.belgium.be
www.maleisie.diplomatie.belgium.be
myhandicap.belgium.be
www.mozambique.diplomatie.belgium.be
*.decroo-i.archive.belgium.be
handicap.belgium.be
www.inde.diplomatie.belgium.be
www.duurzaamevenement.belgium.be
premier.michel.archive.belgium.be
www.zuid-afrika.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.saoedi-arabie.diplomatie.belgium.be
www.kosovo.diplomatie.belgium.be
panorama.belgium.be
complaints.p-o.belgium.be
handicap.belgium.be
residencepalace.be
smp.belgium.be
wahl2003.belgium.be
eIDAS-M.iamfas.belgium.be
premier.be
www.koeweit.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
rapport.mobilit.belgium.be
www.qatar.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.spfeconomie2018.belgium.be
www.diplomatie.be
www.vaticaanstad.diplomatie.belgium.be
meldpunt.belgie.be
www.ivoorkust.diplomatie.belgium.be
bienarrondir.belgium.be
cass.justice.belgium.be
www.jamaique.diplomatie.belgium.be
www.evenements.emploi.belgique.be
e.koba.be
belrai.org
cgra.belgium.be
accreditation-new.belgium.be
consular.diplomatie.be
www.turkije.diplomatie.belgium.be
www.venezuela.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
mailings.social.belgium.be
idp.iamfas.belgium.be
2014.jaarverslag.financien.belgium.be
www.kmteams.belgium.be
*.news.belgium.be
scope.belgium.be
*.spaas.gcloud.belgium.be
www.wellrounded.belgium.be
2018.jaarverslag.financien.belgium.be
certif.iamfas.qa.belgium.be
ibfp.be
www.italie.diplomatie.belgium.be
gutgerundet.belgium.be
webdiv.mobilit.belgium.be
www.ofoifa.belgium.be

Certificate

The complete raw certificate details for accreditation-new.belgium.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 242589995368809047108816684379763061511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'accreditation-new.belgium.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824699424209235673730687380635900131349404363696775315220899665521243513563707374174839397224709375868129226204770614984605592023084740950985051993512589588912831257693378977244535561840446039966955987718382439884475414263097293716926966353948427761767877245849961518651655622463253377553612563418493264107672767932501064074285560409169949993412733846461753480659508496220532994872592838676891188759164503201686180943676139638005052415428070177271030610014178290180516901493209613346435178272420441925908529768425311450365435289435375844020178356003683558130354614997951203092576031296134685416533958889707536431705843086752721966285718906817529423372558151258952377161832865149877127480231840013650040010388701102474232417175725877154526158236308320525594680884736345669097317307317410773693297549786029226294193810977085082058582741197922763223177949411924962974910823245741802552168659031272020419909827353134161970429420299548994652081060840037854112839184571724270132858430944386924667557998861500301446914539280506449485886062776553093219073890678136293473076827945493106590543753583745481583022734877123755613607752918064505154494886383566134044675251828195492433667702775863878830461385339526241233114339062046646378451212417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98cde91bf98e49a8f4dad14ed0ae405e98ea4746
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017f69e52c2d000004030047304502200560110741a96574c049de362983b7619e40dfc8adf6021e4c862eb5c5827520022100e17be70094b3272f28e9ceebbcdcc3086f2c647c1b2815954b130809d0e428aa0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017f69e52bfd0000040300473045022100bef10090b8b5e54700564e30eefbcfe06461f8b20cd45dc36dc7ecb44d82bc4902202cfdd36f27adcc531241b014ea5c81d73038862dbf285c3834610cb8e78c4242007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017f69e52bcb00000403004730450220128ddf1fc20dbdb682114b635ef4126adb02c1412f1c4a1c9f018b6867deb596022100bf166c3a4e904acf20260f159d0c2761d59f8795edc693b6c17554b8bec6c730
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation-new.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation.prd.excom.fgov.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005c930fab7503bf800929077deec96a2931c5bb7b5d760e36e57f43f6b9bcc4f48b5037b6b5b6b41004171a1969583c81de24cd676976a19afb48783cb962bc87ce1bbfa91de922ba58bfe9d5e80650a1ceebd2310229def43a583a4428e32b80f7149dc4652d260313f5bbc289f487bfd8d8c88851547a57018a70b59c11160cde55ed21c0c0e1d17c66564cff5c4429cddef77841c8fc4032e66e51055dec99290f41860fe149605acafa1d4af575114ed91f480800c16292cf75c94cd5afdd5648fc540e04e2927f98b4ff94ba1f08870b2497ffcdb1fdefe0a666c62bca0748962e7af99d8d23d8b30b589cea5f2c3a60791b643a6580cf12179c3c4cef0d1a523c1dc40c44827c1fd0329266da3aaf3671567d35dac999e85eec69039a73bbf5b2919ea7e81139bb9ca022d99ca989516908d0bd50f43d2c9e0a3d723f6ec0f85699b0f5065bd18c7ff7780851fc2d6f1ed0939f8cb3f8f728a5573f7f9e50e4706af89c55aafe3163f2030e43704bce792840c18eb801b1e9440c9c2d6270ce83e80850534580b686b139a3f5b76f1f8fd12a0b76e7cbc0379f2b7c2e58f3e4fb2ef5d4579f230e8965bf6486f533d9cfc4aee0543cbe0a270e79233fe0b25664db2a4697c391692679db2c66674e02b4faebff5a23489692bda0dc31066f3e3cf5ab268f4b2431d9c1bc7b1900c1afe723d22ea0c0855360867be2cca1