replicationsite-al2.vdc.telefonica.com

- Telefonica Soluciones Informatica y Comunicaciones Espana S.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:43:0e:63:9e:a2:a2:04:5c:db:b9:22:03:16:b6:16 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Telefonica Soluciones Informatica y Comunicaciones Espana S.A.

Organization: Telefonica Soluciones Informatica y Comunicaciones Espana S.A.
Organization unit: TELEFONICA SOLUCIONES INFORMATICA Y COMUNICACIONES ESPANA S.A.
Locality: Madrid
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:43:0e:63:9e:a2:a2:04:5c:db:b9:22:03:16:b6:16
Serial Number (int): 9652771706434027235391986887690728982
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ba:f8:48:03:d5:ed:4f:06:46:78:9a:ab:6e:45:d2:0b:03:cf:0c:99
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 17:9e:39:63:f2:7b:dc:4f:0b:40:55:68:3f:17:3b:74:9e:db:8b:64
Fingerprint (sha256): 0a:6b:f1:c4:db:39:0a:85:b5:e5:2e:fa:fa:fb:00:49:a8:00:e2:94:50:20:cb:f9:2e:c6:60:db:97:8b:2f:33

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate replicationsite-al2.vdc.telefonica.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for replicationsite-al2.vdc.telefonica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

replicationsite-al2.vdc.telefonica.com

Other certificates including the domain name telefonica.com

(limited to 100 certificates)
www.startups.telefonica.com
securelogin.telefonica.com
cpsdefense.telefonica.com
hub.telefonica.com
*.nos-eu-mad-1.instantservers.telefonica.com
*.telefonica.com
maileu.telefonica.com
gunna.digitalsec.telefonica.com
*.telefonica.com
console.vdc.telefonica.com
prometheus.csbtest.telefonica.com
sni.cloudflaressl.com
formacion.telefonica.com
atlas.telefonica.com
ct.mesgw.us.telefonica.com
content.formacion.telefonica.com
*.2.cdn.telefonica.com
test.arena-api.telefonica.com
innovationmap.telefonica.com
digitalsec.telefonica.com
equinox.telefonica.com
csp.telefonica.com
aura.telefonica.com
develop-mwc.telefonica.com
securelogin.telefonica.com
b2b.visualization.telefonica.com
cust05-expw-cl2-e02.meet.telefonica.com
sbc1.teams.telefonica.com
brandfactory.telefonica.com
piprod.telefonica.com
www.communities.telefonica.com
digitalsec.telefonica.com
kiteplatform-movistar-es.telefonica.com
search.telefonica.com
innovationmap.telefonica.com
atlas.telefonica.com
cybersecurity.telefonica.com
aws.dev.multicloud.telefonica.com
atlas.telefonica.com
sealsign.pki.telefonica.com
globalocs.telefonica.com
*.multinationalsolutions.telefonica.com
josemariaalvarezpallete.telefonica.com
*.voluntarios.telefonica.com
metaverso.telefonica.com
ris.telefonica.com
atlas.telefonica.com
*.vdc-ar.telefonica.com
*.valeria-test.telefonica.com
office365.business-solutions.telefonica.com
*.labs.gvp.telefonica.com
cdn.telefonica.com
gem.telefonica.com
tls.automattic.com
*.telefonica.com
console.vd2.telefonica.com
*.iotplatform.telefonica.com
kiteplatform-movistar-es.telefonica.com
datamanagement.cybersecurity.telefonica.com
wholesale.telefonica.com
auth.rtg.digitalsec.telefonica.com
marketintelligence.telefonica.com
eventos.telefonica.com
innovationmap.telefonica.com
m.eldiario.telefonica.com
*.labs.gvp.telefonica.com
*.identity.telefonica.com
partnersprogram.telefonica.com
www.eficienciaenergetica.telefonica.com
tls.automattic.com
*.infinity.telefonica.com
apps.tgies.telefonica.com
eventos.telefonica.com
cdncert.telefonica.com
*.vicky.telefonica.com
unica.csb.telefonica.com
console3.vdc.telefonica.com
ris.telefonica.com
*.us.telefonica.com
apis.telefonica.com
*.priv1.objetos.telefonica.com
www.telefonica.com
content.formacion.telefonica.com
apipymes.cyberacademyplus.telefonica.com
replicationsite-al3.vdc.telefonica.com
*.multinationalsolutions.telefonica.com
*.vdc-mx.telefonica.com
maileu.telefonica.com
tls.automattic.com
mss.telefonica.com
telefonica.com
replicationsite-al2.vdc.telefonica.com
sor.wholesale.telefonica.com
datacampus-csi-balea.telefonica.com
*.csb.telefonica.com
thinkingthings.telefonica.com
*.oam.gvp.telefonica.com
*.labs.gvp.telefonica.com
encuestas.online.telefonica.com
*.fast.telefonica.com

Certificate

The complete raw certificate details for replicationsite-al2.vdc.telefonica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhl/1ujVWNH9OIbJBEOq
d2LlgLt5OYYYBsHwjkK1kJOD57XYAmP7OHr1zmFCZPLx/2WaI3G0n3fmfy9+pPlG
nM/k3/7a7XMs6ec3NV7rQYyQ0UsYGykaXT9KuGyn8tTJe8SZQWZxrIblWk7OE23R
zCdTfGLV7+VtAVxmE49KxrWulGLaEL7qYDOA3bxXQ5d/7eSzJEpo78kUJW2rCNEH
YIsFtC3MBH/L5/E3sROV6QvGEhPcSfyDRE48YbcJ10H4M8IDsLzgp9JA6fZL0HmL
LCEKafYe+vga8WM2q9KE+CfAHkQgdwSl0feAf7eXlccAW6mLpbv/5Y5Yzbzot9OD
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9652771706434027235391986887690728982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Telefonica Soluciones Informatica y Comunicaciones Espana S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TELEFONICA SOLUCIONES INFORMATICA Y COMUNICACIONES ESPANA S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'replicationsite-al2.vdc.telefonica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25007758592757456917707884723389966814914320000394689072523805322632560729475085084641543254730175553737017491917284440152167939010741056586304731753182440109176300710662201750832083883169832548737454403976124324404655451234745953490003263579146576850345586711650034478719478177364250552100553897736439168876290911806843440330079772475861644120323272423680831520613959114973101734653802698177152592824046871408811162231683854459859983533391059176234150142392931268006634289212374001206568388069830099329684180066182167688203697885555342176441462254259202873665679310802740571835016137569195110033477027732595137544961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							baf84803d5ed4f0646789aab6e45d20b03cf0c99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'replicationsite-al2.vdc.telefonica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c0158709428cb98085e00b3beb980beaad1f609f9c1814d7124cafa2d4b9326bb178ea90949a448e00173cdd9cfaa01aeea3b3c994e59a9320342866e0b2001ca38b443ab2764d8b5b3e50c4031123cc3e6eb482abefdcf66fb46429f6238a13ce9a13770f79406bb0cda4cf56280db896529ff99b34cda725919b34d197c38c1209d5fbc40538d7c065da27bd71a9c628641b4779315693d9c46f25412867faac75902c845ab175804dea64b11ee1f31b2227157e1dc9a9ecb0a1f8ab65e3b571f0c0dad8d4a3fe2ebcccaa18c417ff02539dc0bb73957902ccd40d3fc3c4ed13123a51add924c09e3bc9b25431de92afec4d81637a578f3f27f37d65a6cb58