catalog.grinnell.edu

- Grinnell College -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:10:77:21:7e:3a:de:d3:e4:1c:f9:db:f5:63:64:ef was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Grinnell College

Organization: Grinnell College
State / Province: Iowa
Locality: Grinnell
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:10:77:21:7e:3a:de:d3:e4:1c:f9:db:f5:63:64:ef
Serial Number (int): 6731632988999615335165724781036397807
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4a:3d:7b:27:a0:4f:6a:4b:f3:d5:26:66:d3:70:c1:96:1d:96:59:c2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 8b:10:13:e1:d7:8b:92:5d:82:d9:af:fc:66:6a:ad:61:1b:f3:0e:21
Fingerprint (sha256): 06:9d:fa:a7:f8:0f:91:a6:67:ec:e9:04:ae:43:74:00:d2:c6:37:9f:47:df:51:70:47:15:d2:95:1a:8d:ed:34

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate catalog.grinnell.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for catalog.grinnell.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catalog.grinnell.edu
m.catalog.grinnell.edu

Other certificates including the domain name grinnell.edu

(limited to 100 certificates)
shiny.grinnell.edu
cluster.technolutions.net
sites.grinnell.edu
lgbtoralhistories.sites.grinnell.edu
www.grinnell.edu
growingbeisbol.sites.grinnell.edu
magazine.grinnell.edu
idp.grinnell.edu
dataweek.sites.grinnell.edu
securedns1.planmygift.org
fall2018.museumstudies.sites.grinnell.edu
labs.grinnell.edu
dansinykin.sites.grinnell.edu
absentshakespeare.sites.grinnell.edu
koreanatgrinnell.sites.grinnell.edu
summer2017.digitalbridgestodance.sites.grinnell.edu
digital.grinnell.edu
MAILFILTER.GRINNELL.EDU
edge-uc2.peopleadmin.com
wilsonspark.sites.grinnell.edu
haenfler.sites.grinnell.edu
golf.grinnell.edu
haenfler.sites.grinnell.edu
confrontinghate.sites.grinnell.edu
hum101.sites.grinnell.edu
deathsexandmoney.sites.grinnell.edu
cluster.technolutions.net
cito.sites.grinnell.edu
travel.global.grinnell.edu
yoosebj.sites.grinnell.edu
cluster.technolutions.net
vpn.grinnell.edu
codecamp.sites.grinnell.edu
uconnectlabs.com
cluster.technolutions.net
comm.sites.grinnell.edu
edge-uc2.peopleadmin.com
toddarmstrong.sites.grinnell.edu
bferguson.sites.grinnell.edu
dla.sites.grinnell.edu
gcdata.sites.grinnell.edu
www-temp.cs.grinnell.edu
maipvu.sites.grinnell.edu
bookstore.grinnell.edu
lewiscar.sites.grinnell.edu
sandbox.digitalbridgestodance.sites.grinnell.edu
absentshakespeare.sites.grinnell.edu
discoveringdiaries.sites.grinnell.edu
golf.grinnell.edu
racingiowa.sites.grinnell.edu
mapping.calebelfenbein.sites.grinnell.edu
cluster.technolutions.net
vostinar.sites.grinnell.edu
remotehelp.grinnell.edu
loganmlee.sites.grinnell.edu
securedns1.planmygift.org
catalog.grinnell.edu
www-temp.cs.grinnell.edu
omeka-s.grinnell.edu
digitalbridgestodance.sites.grinnell.edu
edge_uc2.peopleadmin.com
pioneers.grinnell.edu
securedns1.planmygift.org
anger.sites.grinnell.edu
growingbeisbol.sites.grinnell.edu
isle-stage.grinnell.edu
golf.grinnell.edu
dataweek.sites.grinnell.edu
pioneerweekend.sites.grinnell.edu
summer2017.digitalbridgestodance.sites.grinnell.edu
cluster.technolutions.net
unclesam.sites.grinnell.edu
idp.grinnell.edu
his100.sarahjpurcell.sites.grinnell.edu
mailfilter.grinnell.edu
organicchem.sites.grinnell.edu
eriksimpson.sites.grinnell.edu
securedns1.planmygift.org
pioneers.grinnell.edu
idp.grinnell.edu
absentshakespeare.sites.grinnell.edu
grinnell.edu
unclesam.sites.grinnell.edu
stat2games.sites.grinnell.edu
researchcomputing.sites.grinnell.edu
pioneers.grinnell.edu
dlac.grinnell.edu
cluster.technolutions.net
lavermark.sites.grinnell.edu
sga.grinnell.edu
oxs.grinnell.edu
digital-crossroads.fredorivera.sites.grinnell.edu
qualdata.sites.grinnell.edu
securedns1.planmygift.org
eriksimpson.sites.grinnell.edu
pioneers.grinnell.edu
uconnectlabs.com
steveandrews.sites.grinnell.edu
dansinykin.sites.grinnell.edu
BBLMSTEST.grinnell.edu

Certificate

The complete raw certificate details for catalog.grinnell.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6731632988999615335165724781036397807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grinnell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grinnell College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'catalog.grinnell.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732301533307458815955253410881714079635729077923941367125204930530195783330080914818678521765746847601403198349122916967191577068397915735223144341892596295554446516589542955094379564808311029645449303068732587887734328957670446857752315378212424803340812933046774297382920981154896583629074689855892378361365354497238756060873072525215475156334001308579887579672043413720038046489306083120920787952358471565785691056093474605171249281706704371127520489976841491851014616132669079852493510291040506939308831714860588128955225356558054170319402510319786171094957682822817689597012521215663482387722539766242168065100917096217252541938271270803907046852714886370204640524302050814881648904467658745566772573723275518725658174233934445465515459911314086414970730527128383223806382869523705841515205366067746536683040109718095692183948461713141320930351167964412613936002119588166573523290580008776862626665326951597904912409334086026338326294835465008107873807280598466802271304463585287173539514144917590551633593881043330091319885416227993259087668245035301199467440190755682369831137812675324365069372114281788854766442047314943649443783289401253965036129783566745149078686041240234364817973184416727079122524616070809561947247164931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a3d7b27a04f6a4bf3d52666d370c1961d9659c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.grinnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.catalog.grinnell.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b4034e051f91ebc9dfe6f22759ecec9780feb298f98f0ec7dbb88a5b708a6acc8919ab96842bfaa3d96b8039512580f97bb498556e12f6d20628b48aec1f2eb6307f9260fabcbbbbce41764394d1e158f0301a27720a1cd3b22cf813ef42befe32ef04c4afe063858ea03e171d5b3e4eabdeda11a109949c52aad3c4344887447c93f0f5c0d258ccc30c00cd70d0320820582d3a423a5c4533d571464292d6a847cc1e216e69daa41f86e4c0a25c5e627700b02920642ab625bbe3f4a8a8a4471dcd552f0c387417c337c5b5ba6f77dbc2fedf380da4b6e3aadeebf92ca742a1416f1c1fe6f1787f12bf5ca4291220f443287544d17a695967ac26307f328f3d