cas.research.bcm.edu

- Baylor College of Medicine -

Issued by InCommon Server CA

About this certificate

This digital certificate with serial number 5c:ad:35:1e:dd:62:05:b4:46:d5:43:40:5d:ec:16:e3 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Baylor College of Medicine

Organization: Baylor College of Medicine
Organization unit: Information Technology
Address: One Baylor Plaza
Postal code: 77030
State / Province: TX
Locality: Houston
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:ad:35:1e:dd:62:05:b4:46:d5:43:40:5d:ec:16:e3
Serial Number (int): 123188320381807343291538523581053671139
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9a:e2:45:ad:58:4e:d1:4c:5a:42:9a:33:95:92:60:c7:ad:4d:c7:e5
AuthorityKeyId: 48:4f:5a:fa:2f:4a:9a:5e:e0:50:f3:6b:7b:55:a5:de:f5:be:34:5d

Fingerprint (sha1): 11:c1:7a:4b:4e:41:c1:41:47:54:a1:ef:76:b5:fa:24:47:ad:d3:9d
Fingerprint (sha256): 0b:d3:28:fc:c4:0c:3c:a0:b2:b7:49:99:2c:bb:4e:08:56:85:02:09:00:f4:06:53:6b:c9:c9:59:44:9b:9b:43

Issuing Certificate URL: http://cert.incommon.org/InCommonServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon.org
CRL Distribution Point: http://crl.incommon.org/InCommonServerCA.crl

Check the revocation status for certificate cas.research.bcm.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cas.research.bcm.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cas.research.bcm.edu

Other certificates including the domain name bcm.edu

(limited to 100 certificates)
forms.bcm.edu
sapintportal.bcm.edu
intranet-calendar.bcm.edu
semaphore-qa.bcm.edu
alphaphinetwork.com
bcmess.bcm.edu
connect.bcm.edu
webmail.hnl.bcm.edu
vpn.bcm.edu
lyncfepool1.bcm.edu
redcap.research.bcm.edu
acsconnects.org
docuware.admin.bcm.edu
password.bcm.edu
cvd.hgsc.bcm.edu
aceconnection.org
aatlconnected.com
media.bcm.edu
hgsc-hcp-aw.hgsc.bcm.edu
pwss.bcm.tmc.edu
vpn01.bcm.edu
tst-slicerdicer.clinical.bcm.edu
anscsp.research.bcm.edu
myappsdev.bcm.edu
alumniucsh.com
sigauth.bcm.edu
evault.bcm.edu
oncoredev.dldcc.bcm.edu
deku.dldcc.bcm.edu
www.bcm.edu
connect.bcm.edu
cryoemdb.bcm.edu
mychart.bcm.edu
cams.bcm.edu
pdxportal-stg.dldcc.bcm.edu
aceconnection.org
blake.bcm.edu
biobank.research.bcm.edu
www.hgsc.bcm.edu
fmog.bcm.edu
tcrbbiobank.research.bcm.edu
tls.automattic.com
aatlconnected.com
epa-safegx0-p01.ad.bcm.edu
ictr-qa.research.bcm.edu
sug-angus.hgsc.bcm.edu
careeverywhere.bcm.edu
vpn02.bcm.edu
mychart.bcm.edu
epicapps.bcm.edu
vpn01.bcm.edu
mobid.analytics.bcm.edu
claimsmanager-dev.clinical.bcm.edu
collaborate.bcm.edu
mhgretreat.research.bcm.edu
cpd.education.bcm.edu
ahlafoundationconnect.com
cas.research.bcm.edu
mobi.analytics.bcm.edu
ecw-calabrio-p01.bcm.edu
progeny-fhq-dev.dldcc.bcm.edu
tls.automattic.com
apps.bcm.edu
vpn02.bcm.edu
tls.automattic.com
tls.automattic.com
iron-ea.bcm.edu
oncoredev.dldcc.bcm.edu
hgsc-vmweb-08.hgsc.bcm.edu
ahlafoundationconnect.com
halo-esxi.lssbc.bcm.edu
careeverywhere.bcm.edu
primordial.clinical.bcm.edu
igap.research.bcm.edu
connect.bcm.edu
connect.bcm.edu
biobank.research.bcm.edu
oncore-stg.dldcc.bcm.edu
sharepoint.bcm.edu
hsweb-trn.clincal.bcm.edu
dev-slicerdicer.clinical.bcm.edu
ecl-uprint-p01.ad.bcm.edu
tls.automattic.com
mediasrc.bcm.edu
tls.automattic.com
metrics.apps.bcm.edu
fmog-qa.bcm.edu
access.fortefoundation.org
cams.bcm.edu
brain.bcm.edu
nadcdev.bcm.edu
mhgretreat.research.bcm.edu
primordial.clinical.bcm.edu
ictr-dev.research.bcm.edu
acquire2-cats-stg.research.bcm.edu
epicapps-dev.bcm.edu
myappsdev.bcm.edu
cas.research.bcm.edu
aatlconnected.com
oncore-dev.dldcc.bcm.edu

Certificate

The complete raw certificate details for cas.research.bcm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3XwFAYx7W/h2kBS76Ub
nlX8DHX7U4fKdMyAMNbGaB9C0DQYI5+uQnEG9BNNvitu5LZBTOfCYSSa2UiC6i6R
zTYj68/hJQ41BvqkGue83CqV4QY72Ju5Mt/5rhAMIJOikySDV3mIZMcwXAP6MdBh
oKoFq2pA6KhCvqi+GXbfECH6c1au++RA+m+k9FDFrOhdk3QRxV3oKCCiUVLnqsS8
UKKBAlxy+6+8Ia9oLWBvqYLh6WlWjeisZWcn4Bb/Adxb8SHq3G0DMRUiIE0a0rM4
g6OTYcuA9yb1MyYsKLdq3LYihVoJZFwnpe6OdlGofZbg8EUtUY7PU2WndKnHnDeK
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123188320381807343291538523581053671139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '77030'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'One Baylor Plaza'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baylor College of Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cas.research.bcm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18615188129477108459485904815047095615656349632511552120703037922607180170389294508899451227872567716227547498019760147129670206783508991004953287444619243535802562597463376199169656557167954218460741161603332121473680633175253053814904787353485788506735279824538946457074925188591760412203341309782908760534487917477772126950546193213859747470267003837716534411347363863722038827613420792932125851622895914721914750581567356470635142726916062067396064041674328838953858152151178312096168745283872092416251685970464399909689296915146018893768481712472728213858821355983299756639704636692337535099285492348023842769457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 484f5afa2f4a9a5ee050f36b7b55a5def5be345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ae245ad584ed14c5a429a33959260c7ad4dc7e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon.org/InCommonServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon.org/InCommonServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.research.bcm.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e37c5d9f374710c0c6085a28eb4cccd8d530a6c1a759a3d99b93ad898bec97ebf3dc8688f2a7168d55e2e848645ac786db180d47bc423e71e13d2d4f55c0a6e64745419e526620151e28516e147a2aa25fbdbb22de550d7f0704f44fc52f248e7f13b2e5fe2caafd6fa8d7e284230de7b7f2fd9b5ee163df63db659a62f785c88b978cb22b954266ae6c9aa334eeead743f4a8537499069662cbd313e091c76ff682edfc1d4970c7f29f45c974fdedd6bbd6ae509a323dcbc3129a52a6f59e2179fd0ca9cef317681aa737d504b0c44a536e0e061003d05a776a35c195fbd0c14c2a588b9f839165901522654c90604064c33f98c5d5f760bafa96905fa6c57