suivigiant-prod-assurance.cardif.fr

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a7:21:37:18:a7:8d:61:38:00:00:00:00:50:e3:d4:8d was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a7:21:37:18:a7:8d:61:38:00:00:00:00:50:e3:d4:8d
Serial Number (int): 222153538578271615554191500464907080845
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8c:41:50:c1:30:65:a0:7b:d8:dc:76:5d:e3:d9:df:b7:4f:54:c3:a9
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 5e:6d:9a:62:7b:6c:e6:40:c7:d4:ff:3a:62:63:bf:a3:91:b6:57:dd
Fingerprint (sha256): 09:50:48:ec:f6:97:4d:b4:c0:dc:19:69:86:91:07:06:36:5b:bf:be:d6:e3:06:5d:2d:c8:78:9d:80:b5:c9:1d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate suivigiant-prod-assurance.cardif.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for suivigiant-prod-assurance.cardif.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

suivigiant-prod-assurance.cardif.fr

Other certificates including the domain name cardif.fr

(limited to 100 certificates)
simulationrentes-prod-assurance.cardif.fr
opportunitedecontact-pp-assurance.cardif.fr
bnp12b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09b.bnpparibas.com
prevoyance-patrimoniale.cardif.fr
suivigiant-pp-assurance.cardif.fr
dsir-assurance.cardif.fr
assurance-credit.cardif.fr
pops-souscription-pp2-assurance.cardif.fr
plsir-pp-temp-assurance.cardif.fr
bnp07b.bnpparibas.com
bnp07b.bnpparibas.com
temp.cardif.fr
bnp09b.bnpparibas.com
beneficiaire-run.staging.cardif.fr
bnp09s.bnpparibas.com
iespub-assurance.cardif.fr
sfp-pp-temp-assurance.cardif.fr
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
opportunitedecontact-pp-assurance.cardif.fr
bnp19b.bnpparibas.com
bnp19b.bnpparibas.com
bnp23b.bnpparibas.com
bnp07b.bnpparibas.com
simulationrentes-pp-assurance.cardif.fr
www.cardif.fr
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
nowcl-temp-assurance.cardif.fr
bnp07b.bnpparibas.com
assurance-sante.cardif.fr
portail-relation-client-c01-rec.cardif.fr
portail-relation-client.cardif.fr
bnp09s.bnpparibas.com
bnp12b.bnpparibas.com
bnp09b.bnpparibas.com
bnp07b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09b.bnpparibas.com
bnp15b.bnpparibas.com
alfin-prod-assurance.cardif.fr
finagora-pp.cardif.fr
bnp07b.bnpparibas.com
bnp09s.bnpparibas.com
cardif.fr
bnp09s.bnpparibas.com
simulationcapitalisationrppfrance-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
opportunitedecontact-pp-assurance.cardif.fr
bnp09b.bnpparibas.com
espace-indemnisation-c02-rec.cardif.fr
suivigiant-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
propositionarbitrage.cardif.fr
bnp12b.bnpparibas.com
tmp.cardif.fr
dsir-assurance.cardif.fr
bnp06b.bnpparibas.com
bnp09s.bnpparibas.com
alui-images-assurance.cardif.fr
document-information-cle-pp.cardif.fr
espace-client-c01-rec.cardif.fr
portail-relation-client.cardif.fr
bnp18b.bnpparibas.com
bnp07b.bnpparibas.com
demo-portail-c01.staging.cardif.fr
simulationcapitalisationrppfrance-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
bnp04b.bnpparibas.com
bnp12b.bnpparibas.com
giant-prod-assurance.cardif.fr
sfp-pp-assurance.cardif.fr
bnp07b.bnpparibas.com
bnp12b.bnpparibas.com
bnp09b.bnpparibas.com
bnp09b.bnpparibas.com
alfin-pp-assurance.cardif.fr
finagora.cardif.fr
bnp12b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
iespub-assurance.cardif.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09s.bnpparibas.com
bnp19b.bnpparibas.com
bnp09s.bnpparibas.com
bnp04b.bnpparibas.com
shaker-pp-tmp-assurance.cardif.fr
bnp04b.bnpparibas.com
bnp04b.bnpparibas.com
portail-relation-client.cardif.fr
bnp07b.bnpparibas.com
canaldigital-assurance.cardif.fr
bnp07b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp12b.bnpparibas.com
comptes-run.staging.cardif.fr
bo-run-n2-client-portail.staging.cardif.fr
shaker.cardif.fr

Certificate

The complete raw certificate details for suivigiant-prod-assurance.cardif.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SyJP33MgnY4uavElbbs
RkrxSOEG5Ony4vZosq4asjeMqAEgZS3AXJfLiXNEdMQcPYFwQjRXlMe79bDrNRZW
3Zu8br6MHGGa2kBQbztWBAyVooTfY/DOWlKZ/Yydnn4+EKtWEyoTDXKQiWo+1ovU
amxr11YBNtNmFqSfFoc2hm4WSJpN12UZGT37UmBRQsLgk+Dq0Xo3SXTQDk3t4ppg
b6REy+nkMIHvohz//kbMnkdQ+81debPMo0LNqddfQKSFxAMhtGWiCxbQEJsZaG0f
vy87j87ftI90xEH5zJ17MwBeWugDkYysAYxjH9Bf1tlh57+jMAi6f/hkF3acGIoJ
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 222153538578271615554191500464907080845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-14 13:28:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 13:58:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'suivigiant-prod-assurance.cardif.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26910720539552944512130374494502430194832931877898059267658337885770636705639040786863015454947954707157810840967375385746739760399972317188146615850378963581643310142539283863147683414941712621250851116860731957230463561233039782693787755765528042790020330210623278553813811059927070293154819861302802501866093718703476458003740368467157162018071019790644111206049688268646782854706878495318059098015385918624106337857173799748857934885705053649372197100847561494141014124321216856239940949977373152095063825662087397347362941192216931536854596960104609634011393635278584047560250801786021431260190460240295201737063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c4150c13065a07bd8dc765de3d9dfb74f54c3a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007ce7999a19aa350cc74b9d8f81b340d6c5b5a09ca638183916cb239191622c9375f7132310c044b1964f266e715a0e557c55a4d4c7d526f187672ee359769fb8b9946eb34eab2531811cd11b3a527120d8a8fa870ba1535a2ef24b99cadaab1c63ef3471a3907979d2c62bba5f2ae225819eec854dc52da68ce30826bc6b17aac3b8066ba25a42d4a924d4c51769407210516ba891d1c9eb8c14728c9b1f40d2853142eac89bb50dc3096507880577ab39d14827ddcd53e548a4d7c5a2ff345c5c6aa6765d5cec28da357df31000c98fada9ffc546a094df41b18ec3f3371d818bf10f06d120327118aedb0fc837c84dbde002c0047f175482d1612ef351ec92