ziegenpatenschaft.ch

- Coop Genossenschaft -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 0a:00:fc:ef:51:bd:b9:ad:25:db:81:bc:12:7e:7e:59:ba:85:c4:67 was issued on by QuoVadis Limited.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Coop Genossenschaft

Organization: Coop Genossenschaft
Organization unit: Informatik
State / Province: BS
Locality: Basel
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:00:fc:ef:51:bd:b9:ad:25:db:81:bc:12:7e:7e:59:ba:85:c4:67
Serial Number (int): 57111941440431470657585527173427278329592267879
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 42:37:a5:f1:a8:ae:f0:74:1c:33:f8:65:da:8d:f5:b1:c7:78:72:9e
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 41:4d:cf:c6:38:af:75:07:1e:91:cb:fd:02:c3:db:4e:79:d0:34:0f
Fingerprint (sha256): 07:25:aa:e8:b4:e2:89:9c:23:77:5a:9b:3d:dc:61:e0:f7:0f:99:36:7b:1c:99:c0:58:a9:70:6d:0c:61:1a:fc

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate ziegenpatenschaft.ch

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ziegenpatenschaft.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ziegenpatenschaft.ch
ziegen-patenschaft.ch
www.ziegenpatenschaft.ch
www.ziegen-patenschaft.ch
parrainagechevres.ch
parrainage-chevres.ch
www.parrainagechevres.ch
padrinatodicapre.ch
padrinato-di-capre.ch
www.padrinatodicapre.ch
www.padrinato-di-capre.ch
cooppatenschaft.ch
www.cooppatenschaft.ch
www.coop.ch
www2.coop.ch

Other certificates including the domain name ziegenpatenschaft.ch

(limited to 100 certificates)
ziegenpatenschaft.ch
qual.cooppatenschaft.ch
ziegenpatenschaft.ch
qual.cooppatenschaft.ch
www-r18.cooppatenschaft.ch
ziegenpatenschaft.ch
ziegenpatenschaft.ch
www-r18.cooppatenschaft.ch
www-r18.cooppatenschaft.ch
www-r18.cooppatenschaft.ch

Certificate

The complete raw certificate details for ziegenpatenschaft.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GGEMEOfrKubW/Kf3he7
DP/TNKxiiNXoa6OsPs9v2tNCRBd/njqGPJlPECCuu2LEX8pfxphlOwd5fEZdIR/Z
urZLQKcd/o/XcQNhHyWXmIci3qeVyZsVYliIYLhXCAlwDSV9oOtMcc2fWWDqBWWX
wzfQ9grDUx2bcsskvRknyqfn+YE/avXoOBR6RMC+RxRAoeMVY+2wHYuj0j4DwU0W
XcEvDJDEuu1or/CjHwPqfNth5L651jbayM8zwC2a+K1q2JOVll9eHxa2bSqYl4TD
ZcdU8jSSFkYdg0yDNnzf3YqT0SYJJf3DU0d5qmQILSWN9qsBpdrMyyU42/4ESvzJ
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 57111941440431470657585527173427278329592267879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-03 08:11:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 08:21:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Coop Genossenschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informatik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ziegenpatenschaft.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29335373862188995253531210497596643588997802633705051680206300626590036716404119542317929053893584513492596588908214849189743011499284968214188641600700347229043139543217862105908548888092595737250314711908007919753057229853212218497027448974930973663426140474688667646673613907420072257516669716672094380950263620262662830072920404768978158553178473604515574059070606199475766165590692290930401272681662119689260636352673469448482134235722672287130612497452288111794964784272283162473641302466676611274374106367081476592304340838482522223114033980172065431508854269956898527378725874589462913736234925518440055491001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (340 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziegenpatenschaft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziegen-patenschaft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziegenpatenschaft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziegen-patenschaft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrainagechevres.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrainage-chevres.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parrainagechevres.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padrinatodicapre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padrinato-di-capre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.padrinatodicapre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.padrinato-di-capre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooppatenschaft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooppatenschaft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.coop.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4237a5f1a8aef0741c33f865da8df5b1c778729e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001632517b531000004030046304402203b7ee9de96c33e26ae7c359f2e2c07d9fc655259e862fb6b9413ce77503bbd530220434c687b20abdc6c879981ab7badbe2ab61d645eeb8e77fe2d3269c15636a442007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001632517b54e00000403004830460221009b105220170e80281d5ec2b5788314a164fd330545f2fd35b9387524e7e0de56022100cc6e3318fa5b6447a86f4e4b1e2bc1536069477687b8e0eab4bb64647fb61b400075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd000001632517b7be00000403004630440220631fd3af617859e072849f4ce15a0b62539c3c7f8e4eef278d97a45d662a32730220059b193b45f58d6f7ed04aa5e2daffd16d8b08e7704f06f0df52f2fbf805945b0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001632517b85c000004030047304502206834f63392672fdf841ed3ef077933588b70e200d6939ba49c5379ad9d32f1e3022100af441c4d8cbc0c3dc7d7692faee12a839b4d1b64e7e35a356dfcc5074adda1d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		002683bc063ee561337115668a24ab2bf54ee8ad8d5868fb79b3475571fae53602b6afbc8970f4247a659c815cca257a865247280d6f4dde8bba0eb3900aa1f37a3d5a86e88a4fb8173e59e8807203e61bc237dbc5a43924135be99f0b3c23ac7c53f9b7acd9c71033f6236b72004512c00da4b5c67be0213cc203a9e8dd94fcf22973cdb0c841c285d3ebdb631d2d9234e299b79bc7f6cfb7e1e41846e62041172999f3cbe1bccb44906425cf99146888dd20e2a02891f6297141402ecc644f340c48c4025a8b284537ec927f768c072b912459fbb1b198828b429b13af689f0b5a0a3fedcb88d006a6f2b592f54a05ba005934d1555cf7b880d44f4e7ea3f867605aa2eef1e6aeb8e15291052136aa9e231c4f1f961499eff8125393a485503ea5c8a3a7a33ae024c3ab68c44c838dc60a8fff21aabc73e952aa53ca95fb4f5ad9b6389e647b30b2e8114b2290b9cbd967728c7dd272bbc81f90aa81baa0de45e3c5a0937e15bd60a2dbe6793b9776ab3ff9dd7732c5365b806e4d521234c2fc85ad48de3aca58872f22e51f55c1b5e6e885297306b222abbce328958e667a54203f6230a175da38fff1e5003fa974663c7f979e8695efaaec3f311668d01a2b643297d6dd496650a1bb8e7bca48bc41cefb05e86323fd995c0896c46866922000ecfbd154f41b5f5a61a51487d071dc3c0979b080403d259eebb1d531864d1d