news.tib.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:71:3c:75:f9:f0:b3:63:8c:15:7b:9a:cd:52:44:c2:75 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=news.tib.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:71:3c:75:f9:f0:b3:63:8c:15:7b:9a:cd:52:44:c2:75
Serial Number (int): 318654812132177838748488942056981326512757
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:cb:66:3c:d8:e1:0c:e6:12:54:35:4f:4f:dd:c4:75:7e:f5:27:08
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:8f:94:a4:27:fb:ba:46:98:1a:e5:d1:4e:e7:ea:ec:2f:f5:d8:28
Fingerprint (sha256): 0b:34:0f:91:73:fd:8b:df:e3:12:ff:2d:b6:b3:89:3b:2f:35:6e:63:4e:ba:fa:2b:ff:de:8a:f6:23:be:bf:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate news.tib.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.tib.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.tib.eu

Other certificates including the domain name tib.eu

(limited to 100 certificates)
mybib11.test.docdel.tib.eu
tib.eu
tib.eu
gitintra.rz.tib.eu
msxmail.mtest.tib.eu
admin.tib.eu
news.tib.eu
imap.admin.tib.eu
rdgw01.rds.tib.eu
lbst.tib.eu
tib.eu
tib.eu
git.tib.eu
git.tib.eu
vhlbs.tib.eu
msxmail.mtest.tib.eu
opac.tib.eu
opact.tib.eu
mybib11.test.docdel.tib.eu
scbp01.rds.tib.eu
tib.eu
scbp01.rds.tib.eu
news.tib.eu
tib.eu
git.tib.eu
imap.tib.eu
opac.tib.eu
mailgate.tib.eu
mybib01.develop.docdel.tib.eu
mybib01.develop.docdel.tib.eu
nscale-prod.tib.eu
nscale-prod.tib.eu
news.tib.eu
checkmk.admin.tib.eu
*.av.tib.eu
news.tib.eu
*.labs.tib.eu
*.projects.tib.eu
news.tib.eu
av.tib.eu
tib.eu
*.shan01.han.tib.eu
bibcontrol.tib.eu
xmpp.rrzn.uni-hannover.de
ssollw01.tib.eu
news.tib.eu
*.SHAN02.HAN.TIB.EU
tib.eu
primion.tib.eu
admin.tib.eu
docdel.tib.eu
tib.eu
msxmail.tib.eu
mybib21.docdel.tib.eu
tib.eu
tib.eu
mailgate.tib.eu
*.develop.tib.eu
waswenn.tib.eu
vhlbs.tib.eu
mailgate.tib.eu
*.shan02.han.tib.eu
tib.eu
tib.eu
tib.eu
tib.eu
tib.eu
gitintra.rz.tib.eu
office.tib.eu
*.fid-move.tib.eu
opact.tib.eu
*.shan01.han.tib.eu
*.shan01.han.tib.eu
xmpp.rrzn.uni-hannover.de
*.projects.tib.eu
opac.tib.eu
rdgw01.rds.tib.eu
opac.tib.eu
edocs.tib.eu
*.av.tib.eu
scbp01.rds.tib.eu
news.tib.eu
*.shan01.han.tib.eu
av.tib.eu
ssollw02.tib.eu
tib.eu
tib.eu
*.develop.tib.eu
tib.eu
rdgw01.rds.tib.eu
tib.eu
news.tib.eu
lbst.tib.eu
checkmk.admin.tib.eu
tib.eu
*.shan02.han.tib.eu
msxmail.tib.eu
sqpilotra01.tib.eu
tib.eu
tib.eu

Certificate

The complete raw certificate details for news.tib.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgISA6hxPHX58LNjjBV7ms1SRMJ1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjEwNTAyNDJaFw0x
OTExMTkwNTAyNDJaMBYxFDASBgNVBAMTC25ld3MudGliLmV1MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAuHWRkPr7ozHde08OepDltyOIxlqyeDir433e
Enmm+Hwof4KRYlJlQ9VBTLMY+DX8ipQifE7IZ7po/gI5zmz6GrYqQ93RlKIG+RS4
QA/D1vX7PTh85xIbAgg3Etmty8Tm9lXSBqPuuFLJysIctJtga95ndPRB53ZMgJKR
YRV5olFfLKpFSWyh85WbjuuJ0JZ/Dd0LRjSYjhfHY8H1g/8i+HgZHE0ZOytdjgkR
r1qbQeDWded3jCoOPCZCgAhomqBWeIH+NGhPvvqkqjkHDYCY69FuMZ0Khv+MTic3
XS8RqQzi6wHMfQ8bG/dU3UYM6PgGaWVBw/TQ8trsEWLTGdKyBY3UcE3TuydRfSso
DT1aRz54bHlBIQzfoqznUHVjJryJvHTTIXaDKzJWrQp8c+qtUCjoSF+kkaqRvsZv
5b0GwCMG+HveV8z2rYhNZWJITnVLAN3mc7+v6bc5PGN4x5+AXks1COO7MoEJIAKy
JNHQi3RFEXp4ZOILPv4tjbsFCTNvmDhZ3A11sWCj5jkwsTSVklN+oquvtKAt38Yf
Gdw4e1JO//Tl8DypbRRODIW91CUp2FfwFe4qfyGOPJtYzTs/5TPKoeN1gwuRZI23
9myeCqACyzIAyxIunuSyQA9jSCmEAo9zQcE75mIeLyRje33nHAyxDYN0iuWBEGeg
AxdDHaECAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU1stmPNjh
DOYSVDVPT93EdX71JwgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtuZXdzLnRpYi5ldTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2
AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABbLLFLLsAAAQDAEcw
RQIhAJyOfmgsy9WXjAnjGifknF0l+DCPfRgou1R7SWIzVh7WAiAGUA+K6LM8uHFU
TeF1gFDE8payHY5qAHo+nJZP9DHnBgB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc
pMMM9OVFR/R4AAABbLLFLEcAAAQDAEgwRgIhAM5MheRNWOL/BMAA/EHu0vcDO86n
20Mnl6vvm3jrlYkzAiEA4nJsdOFKP3FT2Q2Rw+Wz92/YmJRmX9QQ25HLKZMTrOow
DQYJKoZIhvcNAQELBQADggEBAFXq6s7nNbc7t4NWJFvMPXPhDoJYNR+cLnmYPDDL
PawoTymkSVw1ZU4klo5WJrBrn4fgrp6kvkviwX6OoADHkHroGFgScC5VmJFcI2Nr
8aR5dOab7DlWaEAtZ5Fd0PJj9Th/E1tz568wsD/yWo6Iqy73biOzzIByT0AmetdB
k4QSdmFyWEDteSl0KgxDNmtVq1vci/p3dVJnRg9mf9MRjofdNL1LF1vkLeNrlNOX
oYmTqzvWppYUy9u88LrIKKE9STov5FqqI1yuusmJgrRTPYoF4FtLr5Rqkgu7HhTR
f+oUJUqS9I6EJliwGoJTXztAYV+lEN2nHckffKuYzNDjOiE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318654812132177838748488942056981326512757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 05:02:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 05:02:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.tib.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752528094910032995331336246815693437822533257483397517230263361389705766196129329115021290184189343972649401380931859638496320545757663376212489068225682302045258654222356408234730723466690516171224353217945210035466820089042418098155109787659460950769604359753566715548677675619029959820185544184111006253168877054834186927066522235617273552552119199331267090724507628125803037750407848925766197127306575519495024552045762433008853721470302810964097370655614385190619109134643952795385880208688315020987742300645415669200878689325591635413427090906545179152542461661395318072011776083363696428204202989272368664933342564094022102109253423730525208635700898292311970878125898951073310607775122409647292810113422687696745649024223881627885173100299034812159457255988695415672000244075291649329054534057975687169772177551193793640436199170952453798199174929019481127691831633219267558556810590258407407228548286283593094521257137082248513076802953579160100912640012767758116108621032325441019078610062455991902967837924682359286575908866855544826396207690373318041879102717780422373794421655717109656156815135313654208092745375107162994983451188450977774799657323106290296783749218975298138128807302112915735981666744504777699334757793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6cb663cd8e10ce61254354f4fddc4757ef52708
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.tib.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cb2c52cbb00000403004730450221009c8e7e682ccbd5978c09e31a27e49c5d25f8308f7d1828bb547b496233561ed6022006500f8ae8b33cb871544de1758050c4f296b21d8e6a007a3e9c964ff431e706007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cb2c52c470000040300483046022100ce4c85e44d58e2ff04c000fc41eed2f7033bcea7db432797abef9b78eb958933022100e2726c74e14a3f7153d90d91c3e5b3f76fd89894665fd410db91cb299313acea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0055eaeacee735b73bb78356245bcc3d73e10e8258351f9c2e79983c30cb3dac284f29a4495c35654e24968e5626b06b9f87e0ae9ea4be4be2c17e8ea000c7907ae8185812702e5598915c23636bf1a47974e69bec395668402d67915dd0f263f5387f135b73e7af30b03ff25a8e88ab2ef76e23b3cc80724f40267ad7419384127661725840ed7929742a0c43366b55ab5bdc8bfa77755267460f667fd3118e87dd34bd4b175be42de36b94d397a18993ab3bd6a69614cbdbbcf0bac828a13d493a2fe45aaa235caebac98982b4533d8a05e05b4baf946a920bbb1e14d17fea14254a92f48e842658b01a82535f3b40615fa510dda71dc91f7cab98ccd0e33a21