campus.uni-due.de

- Universität Duisburg-Essen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number e4:95:5c:34:17:15:cd:6b:af:34:f7:cf:63:95:10:19 was issued on by GEANT Vereniging.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Universität Duisburg-Essen

Organization: Universität Duisburg-Essen
State / Province: Nordrhein-Westfalen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): e4:95:5c:34:17:15:cd:6b:af:34:f7:cf:63:95:10:19
Serial Number (int): 303839505379575007773802047791433060377
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4d:9a:07:e3:6b:1d:62:4b:48:74:64:6f:e3:bf:6b:28:5e:bc:eb:74
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 0c:17:2f:6e:bb:af:c6:63:8f:fd:d2:98:30:94:af:74:0c:df:9c:22
Fingerprint (sha256): 07:2b:b1:b9:d2:5e:98:7e:15:02:c7:4e:96:1d:64:b1:9a:b5:36:9d:ea:b4:ae:49:94:e5:54:96:22:f3:af:19

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate campus.uni-due.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campus.uni-due.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campus.uni-due.de
campus-u.zim.uni-due.de
campus.uni-duisburg-essen.de
lsf.uni-due.de
lsf.uni-duisburg-essen.de
www.lsf.uni-due.de
www.lsf.uni-duisburg-essen.de

Other certificates including the domain name uni-due.de

(limited to 100 certificates)
limesurvey.allgpsy.uni-due.de
allgpsy.uni-due.de
hivemanager-ng.wlan.zim.uni-due.de
r940xa-esx-bio09.cvis.uni-due.de
jira.is.inf.uni-due.de
mail1.wiwinf.uni-due.de
jack-hsn.s3.uni-due.de
nxcl.fwc-cim.uni-due.de
cebar-raumverwaltung.allgpsy.uni-due.de
limesurvey.allgpsy.uni-due.de
paluno.uni-due.de
gitlab.vs.uni-due.de
jack-server04.s3.uni-due.de
matush.wiwinf.uni-due.de
wiki.fsri.uni-due.de
nanoboard.iw.uni-due.de
www.elfe.wiwi.uni-due.de
www.mhb-mathematik.uni-due.de
vdi-vcsa01.win.uni-due.de
iot.energiemanagement.tgm.uni-due.de
kilives.vs.uni-due.de
moodle.uni-due.de
ns2.netz.uni-duisburg-essen.de
office.zim.uni-due.de
retmaan.is.inf.uni-due.de
www.syssec.wiwi.uni-due.de
sparql.es.uni-due.de
archiv.psychmeth.uni-due.de
insights-baumeister.allgpsy.uni-due.de
janus.theochem.uni-due.de
blogs.uni-due.de
www.elokov.wiwi.uni-due.de
shiny.ub.uni-due.de
fin-ztree.wiwinf.uni-due.de
isefs.uni-due.de
web01.mhci.uni-due.de
owoche.fsri.uni-due.de
otrs.uni-duisburg-essen.de
www.ebus.wiwi.uni-due.de
km-test.win.uni-due.de
www.is.inf.uni-due.de
stipendium.w.uni-due.de
piwik.w.uni-due.de
smtp.is.inf.uni-due.de
source.ub.uni-due.de
janus.theochem.uni-due.de
www.beagle.msm.uni-due.de
www.pim.wiwi.uni-due.de
services.ub.uni-due.de
etherpad.uni-due.de
lib-intel-test.ub.uni-due.de
paluno.uni-due.de
www.rwpc.msm.uni-due.de
commodiswiki.s3.uni-duisburg-essen.de
pim-umfrage.wiwinf.uni-due.de
*.gitpages.uni-due.de
jack-server18.s3.uni-due.de
server.uni-due.de
portal.wiwinf.uni-due.de
fruehstudium.w.uni-due.de
nanoboard.iw.uni-due.de
nc.tdr.uni-due.de
paluno.uni-due.de
www.oek.wiwi.uni-due.de
janus.theochem.uni-due.de
transformingtransport.paluno.uni-due.de
uee-web.wiwinf.uni-due.de
jack-server16.s3.uni-due.de
www.iis.wiwi.uni-due.de
pl10.physlab.uni-due.de
labbook-med.escience.uni-due.de
redmine.uni-due.de
www.wpunco.wiwi.uni-due.de
workshop.cinch.uni-due.de
autotool.fmi.uni-due.de
eggnog.is.inf.uni-due.de
vpn.uni-due.de
time2-3.uni-duisburg-essen.de
gitlab.theochem.uni-due.de
www.op-us.wiwi.uni-due.de
etherpad.uni-due.de
isefs.uni-due.de
www.mas.wiwi.uni-due.de
www.ebus.wiwi.uni-due.de
shop.uni-due.de
prozessportal.uni-due.de
www.bielschowsky.de
www.ibes.wiwi.uni-due.de
primo.uni-due.de
zim.web.uni-due.de
jack-romanistik.s3.uni-due.de
sse.uni-due.de
view-esx-bau01.cvis.uni-due.de
www.thp.uni-due.de
www.vs.uni-due.de
radius1.uni-duisburg-essen.de
campus.uni-due.de
gitlab.mas.uni-due.de
www.wida.wiwi.uni-due.de
stubo.w.uni-due.de

Certificate

The complete raw certificate details for campus.uni-due.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303839505379575007773802047791433060377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universität Duisburg-Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campus.uni-due.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 897076050106652878732165613048289592179794170798564384968126126745628791145670821892611056663392201998886079781344236418878825727684075697348433875178511001466551862767809219350392698929646342207837583879598720726145364170674124595129180000553841426536730457898352104901061226153882071924612476721100091921752017451862851010859997317883961323233845807420078383873636766831307758289085999189482870831959675964237275876156572621535641914678976774428780143490972748267135775421619417318365621303489487387368123340466207862163884975308073703975012508966843254051048597602462716208748894885354619594919588165723612950313136332678514139620867871842427542030543342013622800645447945618001070803523491758010358464743411990891540870539304063021712350381703850846488882841632302185809971222898651388869036051750083755100322177074935877769461248274042492338999249037669355320645527170040262637849925687926043654416011486234918361915113035230220238359439297677860135987747487275708138594306951438476467317030568436220843580315616653615079316725566960391634373921308565900033557218598412904463137033326233875196884041188482976926223128345105716173012623483825921187112030430889595363411793771604489803429816770322742082850251975109047885223914629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d9a07e36b1d624b4874646fe3bf6b285ebceb74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus-u.zim.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.uni-duisburg-essen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsf.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsf.uni-duisburg-essen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsf.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsf.uni-duisburg-essen.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		002eb59d002817edbfd7d97ee814615787c8696eb32aaa8b23447520842b9b91529334964c4ff9f1e1a33171df9ba8ce4861a493d658d4bb8f5f65be4e9d918747c0f3ba90c8acfde8b853d555611c1a55fcc8ad046b7a0c8521b508ab206bdf9b49f0996fc412d34a561d95647e64eaa7286c0f560297084869e9454eeb15d1b538069a0daa8cf9571b3fda63cc715450446599b14b9fda6e3f9add36e70a9e025edda1041722ae7282f0a900c42f70c5200d12089247dd94aa2a37c36c77c886282250e967e98ac029d542b6bc684b1eacdf85fdbb915890d8f17537400bbbef53ab61fd764926d816b0a62356e0174ef97d70fabd89b99f04bb172f0551fd68b73cff8d73f898701d63ccfe977651368482c19d2a1f02f4e5aa08ebddec3fa5ac38cd85e866c9523d4593bd6def88f66aa714d5f8ca9ff6999865ded3141db505ae35089e2b1715ea4c14b8811bc9a3541983da7704981bae68dc38a610465a31ef2200e4d2e4ddd416cb17083a7ceb6f48d0fd132ac9344f90adbef0583a56db081e388e2d809323b7cb7aa83edfedf459cd0da9e3f4fba808dccfcd8bcdbd93a081ed6bd943d7c6e325da55df3d5c20b63bd0144460aaecfb5b2b904e041aaddd0db645bc6a12dbf8297daf2723cb6a6751c2a7f70092032117b842d933af0239e2de0ecd0335aaade959e4604bd95a9e3d69aa7c2e7d8dc7fa7bff0e466f