events-test.postfinance.ch

- PostFinance AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 15:8c:76:74:fd:f3:58:29:ef:33:e7:55:c2:dd:f0:90:8b:b5:59:9b was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PostFinance AG

Organization: PostFinance AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 15:8c:76:74:fd:f3:58:29:ef:33:e7:55:c2:dd:f0:90:8b:b5:59:9b
Serial Number (int): 123021229575147627031314213766529618941884848539
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 55:9b:36:30:c8:8f:45:30:be:08:f8:9d:ca:37:9e:af:8a:cc:bd:75
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): d5:30:ef:d2:9f:d8:ff:d3:1b:86:cf:b5:35:98:0d:d3:c4:2a:bb:6b
Fingerprint (sha256): 0b:5e:ea:06:4a:cd:32:e7:b3:5c:c2:40:36:17:3e:1f:3b:e3:ed:04:b9:2e:11:ae:bb:50:18:fb:ab:46:ee:73

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate events-test.postfinance.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for events-test.postfinance.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

events-test.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for events-test.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123021229575147627031314213766529618941884848539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-08 12:04:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 12:04:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'events-test.postfinance.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761108608198117285597132030659189335126960428511045127648924519118716275578729208570825225749154859440515943994612540998983284912941705850655333247185237505240184839905880483647187885142795776371727606051525101827187211044266685140346394741009468996999986101261824203405177335511809382579845416625790677140711982779292699233710317885312037445276947284002707478042453741409071775898940434199598830108555831688620185829038040018111786690872855949521974762823466282896908724578769165172462013193929807808875441117218137916712083425760601187715325703328615302529126393565741415065060165913915492707243386105992069072792707213388640438010743787192817986714331788580818595201069225375134403314496696031766310788224974710511027756162355075149316235346125847536450134814262958534761268237344952110387618390657747115659369022718825102865429510829654733882826278328606709152209738886777102098280700212036483709338245439294299703019857668143138807131128826700702436453316665865821601844200843984509576671456562169933005060001379724768664853679314774000873908975706053845687239177495493222590476639550844518984047494809667690400505308538726342822704779885671673818024768022404194162549141928896034014589561602919310477487727545594078605775990571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events-test.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							559b3630c88f4530be08f89dca379eaf8accbd75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (728 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00224d306ef1d271533c379e3d7ad5d14024e246f790fd5a919062df947b8b97a965be9db6cf95ccc3f73f3ffcd52cc63c77b5eb8d3e8df840dd214c2f834dcc442bd607939392aa1ec9e68442a55a9247af428e036b602f8f207bd3b6ae80d7f12b30cfbe16bd84ff851ad4f3051cf5cb52fc1228578c070ce2d957491fc6847ec0213c6b67e92b09b15f7b60eb3c115c59e06bf598a23d49703d739eba1cb290a6f7ecff3e2959b519d8c27795df923149099e6b85d294216f1181dfffae95e5bf8a6fda1849e9def028b8abb55f04812c1a3b4847a6748a6f04bb782890754d81216e3b14d398086985496f3b44230b152cf70eef084c5af53f784089e4f294eb4cf786903382b5df66775473b3190f9f0125c0e7b140c2782afd75f74d2f875f552c9207ffeda8fd6a69bb28f1edba9c88097d21132a547f78fdf594be21fc060790036c8c355d531b82247928f29a1321de92fdd596636ffb82ac022c6dafad4e167dbc0101584699a5444a5c1caad5d3c54c5000a31f877377f4262d33eddba1dc46b4a0c41d766b079def06b3f32b7a6e64461fa479a014666abe29fe9017d9bc585a3608a4d8a64a390309de3e870c20ab57b803f624aec823e2631d85e1a45556275a8c3804a2e33a56fd647a13e61ceaaa0a65f72c1ba75ae4ccbe1bd88c27cd0c6f0c5e185a1beb882be8628fda833379a59147c6ab729299b54d8f