sv4x5.ait231.tokushima-u.ac.jp

- Tokushima University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 79:22:ba:cc:ab:dd:54:52:45:dd:a9:79:a1:11:37:c1 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Tokushima University

Organization: Tokushima University
Organization unit: Center for Administration of Information Technology
Locality: tokushima
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 79:22:ba:cc:ab:dd:54:52:45:dd:a9:79:a1:11:37:c1
Serial Number (int): 161016914327085944363391195633077532609
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4a:23:b7:3d:b7:2a:83:d3:ea:2c:41:53:08:74:c9:1a:6c:99:60:24
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): c4:51:cd:07:58:e3:d6:dc:9a:93:3e:4a:a4:68:73:cd:b3:24:15:0c
Fingerprint (sha256): 0b:b8:15:81:62:db:7f:ed:88:f6:45:0e:d0:0d:fa:b1:f3:18:e9:58:6c:0d:85:50:da:00:50:1a:27:f1:88:c8


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate sv4x5.ait231.tokushima-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sv4x5.ait231.tokushima-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sv4x5.ait231.tokushima-u.ac.jp

Other certificates including the domain name tokushima-u.ac.jp

(limited to 100 certificates)
ZAIMU-TOKUDAI.jim.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
repo.lib.tokushima-u.ac.jp
industal.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
iaso.ait231.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
pch91.ait.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
rad91.ait.tokushima-u.ac.jp
sihep.ait231.tokushima-u.ac.jp
www.awasapo.tokushima-u.ac.jp
kaigi.hosp.med.tokushima-u.ac.jp
kouza.cue.tokushima-u.ac.jp
taiwa.honbu.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
shikin.ccr.tokushima-u.ac.jp
web-apply.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
sv4x5.ait231.tokushima-u.ac.jp
moo3.chi.tokushima-u.ac.jp
goukaku.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
study.ait231.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
femto.me.tokushima-u.ac.jp
zsysap.jim.tokushima-u.ac.jp
eweb92.stud.tokushima-u.ac.jp
ldap.ait.tokushima-u.ac.jp
eweb91.stud.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
cws.ocs.tokushima-u.ac.jp
ek4lms01.ulc.tokushima-u.ac.jp
irud.med.tokushima-u.ac.jp
adas.ait231.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
kj.medsci.tokushima-u.ac.jp
am.ait.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
www.isc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
www2.e.tokushima-u.ac.jp
sns.ait230.tokushima-u.ac.jp
lyncsip.ait230.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
frigg.db.tokushima-u.ac.jp
bml.me.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
iccsv.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
risa.is.tokushima-u.ac.jp
gidp.ait230.tokushima-u.ac.jp
math0.pm.tokushima-u.ac.jp
adas.ait230.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
bun.honbu.tokushima-u.ac.jp
uls01.ulc.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
kjw.medsci.tokushima-u.ac.jp
www.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
cluster.tokushima-u.ac.jp
iccsv-s.ait.tokushima-u.ac.jp
tse.ait231.tokushima-u.ac.jp
cidp.ait.tokushima-u.ac.jp
ce.ce.tokushima-u.ac.jp
moo.chi.tokushima-u.ac.jp
lifu.hosp.med.tokushima-u.ac.jp
uzu.ias.tokushima-u.ac.jp
web.ph.tokushima-u.ac.jp
www-math.ias.tokushima-u.ac.jp
www.pled.tokushima-u.ac.jp
medinfo.ait231.tokushima-u.ac.jp
kangoportal.hosp.med.tokushima-u.ac.jp
hub.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
tocms.hosp.med.tokushima-u.ac.jp
www.ee.tokushima-u.ac.jp
kjm.medsci.tokushima-u.ac.jp
avian.aitre.tokushima-u.ac.jp
els.stud.tokushima-u.ac.jp
moo2.chi.tokushima-u.ac.jp
www-me.ait231.tokushima-u.ac.jp
cbtph.ait.tokushima-u.ac.jp
twf.ait.tokushima-u.ac.jp
www.cue.tokushima-u.ac.jp
www2.isc.tokushima-u.ac.jp
rad01.ait.tokushima-u.ac.jp
web-ias.ait231.tokushima-u.ac.jp
ed.st.tokushima-u.ac.jp
weierstrass.is.tokushima-u.ac.jp
web2.ias.tokushima-u.ac.jp
dev.ipc2.tokushima-u.ac.jp
vdi.ait.tokushima-u.ac.jp

Certificate

The complete raw certificate details for sv4x5.ait231.tokushima-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgVEHTYHanTbYAzRW7pa
BmavMVBCAAG2E1eL7P/7yHELsGIrQiX7RfMbBsaTs233jnRQrmSXxJy9DrccE/d9
LzDAvyszB22zveOLN5TF4OGg3eM9O/2u/4CfIN+kFghN/21cP+HR5n6jTa86o2v0
kT4dX5B5kh2F7KMIZGQThzi8M0cP1lwiXxvVkqAi5f8IAJ4PWB/v4fuzS1mGk3sg
IOfg8f8OeRrAk6gV8EEcskmV0Rp7lOKyH7spcjH0xzqq7j6ZzgaLieBHWcV851Oh
b+jG5upvXLn5eCEjM+bawuuUp4JNqB6RmkYX8LdmxMJPoOWQ+ZsnpsquIvidar0T
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161016914327085944363391195633077532609
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 23:37:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-20 23:37:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tokushima'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokushima University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Center for Administration of Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sv4x5.ait231.tokushima-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24997781179538155017849455978476911179298891175783254268873407703511675592918953444178966988671614070478405511922509120125014509281305575180392829449989655843427370040504127972420019635749323877105662439790910736120085168575874595674993441892886539114395944609912911565848572858226870982038004186984240751820259257206670362318473376705979565291428687207989259589183378525524377636673381848251477058740769899329513547692678533313025662671374777675460274496922926368501087775646189686918272521370017433496640325527189597507365483238157016651302537443560048480350931367640892015527126882499595281731675861994115186889541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv4x5.ait231.tokushima-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a23b73db72a83d3ea2c41530874c91a6c996024
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001bc3c16421128d8c9a948b6ccccbcd1d1699b6081105cbe06b88dfdcaf869ae573c6ae5f0dcd100a18ecf3fc304476a5d6665e2651c1c72923e442a61e6ef00a732640ecaa6a065f6f31f8fce99d97b894bbc092f467939220d7e1622bfd33d0fe176d32d603cf62f6abf7f178aabfacb1caab8c8f976b3cfae486c67c78de7a754687ed55252dd5cdb9ef3f76985e85a4e3c36ac3857ca263fe40cbd523578395947282127bac304759fc1e40e18ed42605996e16d0b0eb0188e056b83d7ef467df681b0a74e97b2c9178e7e62cd23183136fcca46e16e9bc5bbc06351100a70947debf50b69990471a1134bbab50a14374d73d82b4a35695e9ef8aac1c3228