ldaps.bauermedia.co.uk

- Bauer Consumer Media Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:d1:44:ca:e3:5d:02:31:16:07:57:ac:b5:a4:3e:ef was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bauer Consumer Media Limited

Organization: Bauer Consumer Media Limited
Organization unit: IT
Locality: Peterborough
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:d1:44:ca:e3:5d:02:31:16:07:57:ac:b5:a4:3e:ef
Serial Number (int): 3745041313311024596035760420129357551
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f0:43:59:cd:ee:16:4f:ad:90:eb:79:da:7a:b4:09:56:38:70:92:27
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 4c:43:cc:fd:cd:a3:9b:ab:7e:8e:a8:70:23:7e:4d:93:40:77:a3:cb
Fingerprint (sha256): 0b:fd:4d:12:2e:fb:d3:a0:58:4a:8a:d9:c8:08:18:e7:6b:0f:14:09:a7:a9:c2:6b:90:10:7b:1f:20:ed:c7:06

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ldaps.bauermedia.co.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ldaps.bauermedia.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ldaps.bauermedia.co.uk
msadsdmz01.bauer-uk.bauermedia.group
msadsdmz02.bauer-uk.bauermedia.group

Other certificates including the domain name bauermedia.co.uk

(limited to 100 certificates)
*.bauermedia.co.uk
www.bauermedia.co.uk
news.bauermedia.co.uk
sip.bauermedia.co.uk
news.bauermedia.co.uk
mail.bauermedia.co.uk
data.bauermedia.co.uk
lync.bauermedia.co.uk
mediavine.bauermedia.co.uk
data.bauermedia.co.uk
filesharing.bauermedia.co.uk
www.bauermedia.co.uk
mediavine.bauermedia.co.uk
myradiodesktop.bauermedia.co.uk
ldaps.bauermedia.co.uk
mail.bauermedia.co.uk
news.bauermedia.co.uk
ldaps.bauermedia.co.uk
*.bauermedia.co.uk
www.bauermedia.co.uk
news.bauermedia.co.uk
uat-masterdataservice.bauermedia.co.uk
dse.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
lync.bauermedia.co.uk
sip.bauermedia.co.uk
dse.bauermedia.co.uk
bauermedia.co.uk
ldaps.bauermedia.co.uk
creative.bauermedia.co.uk
data.bauermedia.co.uk
dse.thompson-valves.com
rack.bauermedia.co.uk
*.bauermedia.co.uk
news.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
nextcloud.bauermedia.co.uk
careersportalfiles.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
lyncdiscover.bauermedia.co.uk
magazineanddigital.bauermedia.co.uk
bauermedia.co.uk
mail.bauermedia.co.uk
*.bauermedia.co.uk
production.bauercreative.net
filesharing.csaws.bauermedia.co.uk
www.stg.bauermedia.co.uk
careershub.bauermedia.co.uk
mediastorage-lls.bauermedia.co.uk
www.bauermedia.co.uk
radioawards.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
*.bauermedia.co.uk
nextcloud.bauermedia.co.uk
*.data.bauermedia.co.uk
www.bauermedia.co.uk
my.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
bauermedia.co.uk
*.bauermedia.co.uk
myvpn.bauermedia.co.uk
www.bauermedia.co.uk
bauermedia.co.uk
fbhost.bauermedia.co.uk
bauermedia.co.uk
data.bauermedia.co.uk
myradiodesktop.bauermedia.co.uk
www.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
mail.bauermedia.co.uk
sip-pbo.bauermedia.co.uk
news.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
dse.bauermedia.co.uk
mail.bauermedia.co.uk
myview.bauermedia.co.uk
kibana.csaws.bauermedia.co.uk
*.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
*.data.bauermedia.co.uk
digitalsales.bauermedia.co.uk
careersportalfiles.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
*.bauermedia.co.uk
mediavine.bauermedia.co.uk
fbhost.bauermedia.co.uk
www.bauermedia.co.uk
formbuilder.bauermedia.co.uk
nextcloud.bauermedia.co.uk

Certificate

The complete raw certificate details for ldaps.bauermedia.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubsAVrDcTlTHpVRVJqJc
f4KfMc4nWAi19QDjfrsG61ImtezkQJmGgiil7dMneVD60OAdzaQMq+nOq2KgqfXR
/s1kj64Ht5EViXHGivsetqhZMAhAzs1GJ0zfhnQ/jkrDrpwvEcMPnVSSTJYYOWuv
K5Oj3gfGWqEj4uxlKoN5qXvDd3VRgIXXkMhzBnCM9vtj3oMH1/yWXQjY0aMG8HgN
n6zfASTDbu1hLfBf5m+kgjvRvHjnxKvodvcn8FzjojXnQ9dhVoqFSOlVIymdhVUe
iMMWuRedOgMuAYPgSanQiyShAgCcrwqdCkVUHN4o0VlW2itmprWdXOJEWFMoVnij
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3745041313311024596035760420129357551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Peterborough'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bauer Consumer Media Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ldaps.bauermedia.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23446300207847314331694248355878493119396736367815614392586906481647941015216632812014036400838077547112342319594037354033265444138484188855788870507738659893359843939167267519525687999189739597874797601013991696915475206718115674201622480174682156297389813549452989674436986163042545726579443070546068492469541186853175335289851957095628371137976054380341953049388412151295435109060832645432284034596560545401820468260184313792396356042570977394917120038477937807278138461783047174665161283371906570676218497200228677175113948427724279986973862496976684300555121045912754150651073382627258782730177260793963602289453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f04359cdee164fad90eb79da7ab4095638709227
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldaps.bauermedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msadsdmz01.bauer-uk.bauermedia.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msadsdmz02.bauer-uk.bauermedia.group'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007ced648cb5a74c92b1d536db6699849fc58723ef8638d214b01cf328fd24caf07f47acb7301306c30423fc94663b06ee27d56623fc618c9f3c8b729f6ec99e8f413d365111d244008711a93c5aef63e061fba0d4919f40877033b45745c08973e55c1858b45eb3a935f376a2423bbd62967bc6d6ed057df864f99ff4fb3ace91b6ad43a3a8bdb92753921997ea878fc442299d3094f11f1d5db805e72612051a72843f0f842c5b7a84e8ac2a2f024826d1f291f3f3eea56bf44efb215d641579615706743c7aada1cb1d3669a7907b879e09133fe2df50f0d0b757d6e6e89fad7e6c31de53f74d7d9cb6f2ec00448b8331b5bc723c763cb70288ba0d37a60eaf