surepin.absa.co.za

- Absa Group Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:51:07:3e:e6:75:9b:52:06:f5:9d:fd:a2:a4:18:fe was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Absa Group Limited

Organization: Absa Group Limited
State / Province: Gauteng
Locality: Johannesburg
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:51:07:3e:e6:75:9b:52:06:f5:9d:fd:a2:a4:18:fe
Serial Number (int): 13713002963727511272774556141488445694
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:6e:4f:2b:83:b3:3c:cd:c1:2a:19:a4:32:e8:2d:a5:b3:fe:08:a0
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 05:59:df:7a:6b:ad:6f:c4:2e:68:1e:ba:3e:87:c1:b5:71:c4:da:d3
Fingerprint (sha256): 09:24:b5:fb:84:27:45:c7:fb:c2:ee:46:f6:2f:32:a0:93:43:cb:2f:fa:1d:88:b2:69:40:59:01:48:9f:6c:f5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate surepin.absa.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for surepin.absa.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

surepin.absa.co.za

Other certificates including the domain name absa.co.za

(limited to 100 certificates)
pcvdb.absa.co.za
everydaybanking-ivx.absa.co.za
sts.absa.co.za
salesportal.absa.co.za
myabsa.absa.co.za
cdn-ff-dev.absa.co.za
esdtracking1.absa.co.za
choice.invest.absa.co.za
investmentmodels.absa.co.za
degitlab.absa.co.za
adfs.eng.absa.co.za
paymentpebbleuat.absa.co.za
esb.ext.uat.absa.co.za
thumbtranuat.absa.co.za
paymentpebble.absa.co.za
capi-uat.absa.co.za
skybranch.absa.co.za
bionline.absa.co.za
ss.absa.co.za
credit.test.absa.co.za
qeedb.absa.co.za
onlinebanking.help.absa.co.za
workspaceuat.absa.co.za
rewards.absa.co.za
ss.absa.co.za
qaaroapi.absa.co.za
vpn-za.absa.co.za
relationshipbanking.absa.co.za
pfortnerghana1.absa.co.za
bulksms.absa.co.za
ib.absa.co.za
pcvapp3.absa.co.za
paymentpebble.absa.co.za
qfedb.absa.co.za
claimsuat.absa.co.za
marketplace.absa.africa
conso-status.prophix.cloud
absafx.absa.co.za
instantbusiness.absa.co.za
capi-uat.absa.co.za
pfortnertanzprimary.absa.co.za
bionline.absa.co.za
wbiu.absa.co.za
docuploaduat.absa.co.za
dpedb.absa.co.za
seedb.absa.co.za
Mail.Absa.co.za
eu.absa.co.za
author.absa.co.za
esec.absa.co.za
mobility.absa.co.za
myfleet.absa.co.za
Testext.absa.co.za
digitaltoolsuat.intra.absa.co.za
pfortnerghanasecondary.absa.co.za
esb.ext.api.uat.absa.co.za
vsuat.absa.co.za
surepin.absa.co.za
e.absa.co.za
clientca.absa.co.za
pilot.absa.co.za
absafx.absa.co.za
ss.absa.co.za
s3edb.absa.co.za
seo.absa.co.za
postilionssl.absa.co.za
vs1.absa.co.za
api.internal.intra.absa.co.za
onlinebanking.help.absa.co.za
absa-rbbshortterm-test.absa.africa
vraspin.absa.co.za
pfortnerzamsecondary.absa.co.za
secure.workspace.absa.co.za
vsuat.absa.co.za
remote.absa.co.za
embu.absa.co.za
research-trk.absa.co.za
ohss.ABSA.co.za
ss.absa.co.za
qpedb.absa.co.za
vsuat.absa.co.za
developernp.absa.co.za
esd.absa.co.za
esd.cib.absa.co.za
ugpfortnershau1.absa.co.za
esdtracking1.absa.co.za
www.absa.co.za
mail.absa.co.za
xduat.absa.co.za
e.absa.co.za
corpstore.absa.co.za
dv3db.absa.co.za
esb.prd.absa.co.za
developernp.absa.co.za
ecssp.absa.co.za
XZAPBCC1APP0043.absa.co.za
GBSLE-LD-Cluster.absa.co.za
XZAPBCC2APP0063.absa.co.za
vs1.absa.co.za
leedb.absa.co.za

Certificate

The complete raw certificate details for surepin.absa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSzBx9BdnGMHQFfAfGOh
BG+Kqqv17ipq91njGro6+qpDb4vIuuT2bzbd0S2xH3GHjEE/30jCzbM3ETjyIAtB
NmJ9XaTt3GUXOQ2ucLkgg7Aa2+rwTiIbuobhDqsW2RqbsrGiIX03kdmpKqrM3g2E
iA+xIsnK3/TdUXviZPo1bG4avYzhLll208nBBS+8k2xB2ux3lCFscJK2WGqPLiUi
YWPdFBJbjCxwzlh5j60EiRBgdj5uSKhV4DQiR7SiPnBLSGJE6V5YepLdJGyHZmRJ
3lUJW2GGQ0+kS6XR90KM1b9DguHN/Eb1GjbLNuY/s+AZVypMWfyaP9WvO6t7+gW+
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13713002963727511272774556141488445694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Absa Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'surepin.absa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19336531136978547531961662170122328242134032237353168930348588901209082860199463780587745106872928584652168722571321104069741727531822215446323881044916999205113305893799605816885473772176374580361727660236364206746634171417494046768981214786077888906160799365535396626555495032907008462214862891411027595396357040666224625896799220673873934896098720730582124171884322600824344599070300636057796038698914070751913985097258309074148688330411517903757626752875803928686184460759706831269187109790655552957941793508077734525720109368348360089244028315525459962054713113212959386672441603684571330464521782032098256076347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff6e4f2b83b33ccdc12a19a432e82da5b3fe08a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surepin.absa.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018727f32d8900000403004730450220759974db87cf79d0c841da3331b12300174be159b59a3d0546c14e842234fe80022100af8a78cb0cc8e834e2bb1aaf8ca56b3e4b04a5727f864788496c2dcc434a270400760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b50000018727f32d8f0000040300473045022051075643e1bdef5a48cadff364293e0c6e007b2d20f438b5b2b95da8aa2dda5b022100b2518fd14a3ed8d621b1ff265f56dc30a3698d3b8dda0eb88b919f9a344c7e6600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018727f32d640000040300483046022100dd32808495bd65348a4b27aef099e23faa30b4b9138597f398e48e0957ac724f022100a1967e29296338f6c8a53aa7bdfc023a3b63f92125f90cea0f18a29d98e9a6ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00264274b434a3f6e5c2e1005827b2ca8ce9a49fed07fa98c63fc84ce7eec7868352c5495fcd64d3033174bf3e6f0ec6db24310073b9aa6959d33f0ba88407b6a8e654d8194c328da20332c613fbbf645a44e943ca64509ee7e134b33d1477f553bc28c3e91f6a3b23a0b3e5538e863ddc1a3bbad3105beb13a1a72accba115466865f571a4f30c0bea78c1272a119acb708b07cbc73d6d3d18028bc198280ba740485981dfa4846f3a507bb6d7bbf19ca7d9d7872cba99d2bf84a500c3c05fa9379fdd52eecd9614221c2ba08569832536119c9c201ef9327761e26e4adbad205a6d921c558ccb3d93e3ba16d9236fc6a2330576c04def6acc4a6cde14c0513de