www.libertymutualvantageport.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 03:ea:08:97:79:22:26:d2:36:b8:46:e0:e2:f4:60:30 was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Hosting Services
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:08:97:79:22:26:d2:36:b8:46:e0:e2:f4:60:30
Serial Number (int): 5202855712470239145001160163644956720
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): ec:d0:f7:c1:d6:a4:13:23:c3:da:86:90:34:58:8a:13:f2:48:f3:b8
Fingerprint (sha256): 0c:05:82:6f:fd:7c:05:ba:a4:46:05:9a:c7:cc:8a:f4:b1:c5:e3:eb:63:45:d9:0e:cd:ae:56:40:ad:1d:25:87

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.libertymutualvantageport.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertymutualvantageport.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.libertymutualvantageport.com
dr-www.libertymutualvantageport.com

Other certificates including the domain name libertymutualvantageport.com

(limited to 100 certificates)
perf-www.libertymutualvantageport.com
spadmin.libertymutualvantageport.com
public.libertymutualvantageport.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
perf-www.libertymutualvantageport.com
spadmin.libertymutualvantageport.com
vantageporttest.libertymutual.com
perf-www.libertymutualvantageport.com
libertymutual.myinstantincentives.com
perf-www.libertymutualvantageport.com
splash.libertymutualvantageport.com
tst-auth.libertymutualvantageport.com
vantageporttest.libertymutual.com
www.libertymutualvantageport.com
perf-ipa.libertymutualvantageport.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
perf-auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
perf-www.libertymutualvantageport.com
perf-www.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
perf-www.libertymutualvantageport.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
af.libertymutual.com
perf-sppriv.libertymutualvantageport.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
af.libertymutual.com
stage-af.libertymutual.com
vantageporttest.libertymutual.com
perf-auth.libertymutualvantageport.com
af.libertymutual.com
libertymutual.myinstantincentives.com
auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
af.libertymutual.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
af.libertymutual.com
stage-af.libertymutual.com
perf-www.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
af.libertymutual.com
stage-af.libertymutual.com
libertymutual.myinstantincentives.com
perf-auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
af.libertymutual.com
libertymutual.myinstantincentives.com
af.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
af.libertymutual.com
af.libertymutual.com
af.libertymutual.com
perf-www.libertymutualvantageport.com
vantageporttest.libertymutual.com
perf-spadmin.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
ipa.libertymutualvantageport.com
libertymutual.myinstantincentives.com
stage-af.libertymutual.com
perf-www.libertymutualvantageport.com
perf-sppublic.libertymutualvantageport.com
af.libertymutual.com
af.libertymutual.com
tst-www.libertymutualvantageport.com
af.libertymutual.com
af.libertymutual.com
libertymutual.myinstantincentives.com
auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
perf-auth.libertymutualvantageport.com
af.libertymutual.com
af.libertymutual.com
tst-ipa.libertymutualvantageport.com
ipa.libertymutualvantageport.com
af.libertymutual.com

Certificate

The complete raw certificate details for www.libertymutualvantageport.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYix05tD6rlS/xeQj9Tm
1Iweyz/4NV5K8Dju+lnOR8/DRbvWLi9QSUlZhMIcW2N5skZ/MvI/ggL6fh1ty3PQ
3JDe1pJDxYaCiZts+pqp4hasZe/OpLKYk5hi7B5nBxaNnosA2ZmNjCn8n5kydYZf
LxJYH0b7nMlITXUWk9/zT+ai+gJkfZQZIEljLpCHYu10l8zqH0j+gWE4RimVYSkz
xJVLCtG5SNwqiox09md3sR9f0U2PZbfxPznhFI0LjCxGWRb5vJAwHBLo6sro5vCK
7NM5KuLYer9dV0gtrhwLHLFTRpZea9Y0wP+VPvLAV4YW7KwkjqiICbnbuFvLXA1P
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5202855712470239145001160163644956720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hosting Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.libertymutualvantageport.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22916539835708631079425267276013785996220863612487873896834959833474289719922128817161204826416591254829093788292836871102774835341913516044836256471729853658835342652910593117576072172626869634823882672889088588470824931655435209760332573247111205431625509964942516765629699877781451248622177652803130135314443615883000732588146982357094437547470271771489176331254877608519227982081444242424462556744240101391188323409159273263264491004141030704364012152251250553087782214468407492302672239034695118319756513673770146318034988473834200261453282439979563108808871390735964302323075078287295289313387537310425755242483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036386d52c61dd2184aa271c66e6b00903986b1480b77d14f08ea864c4a36d8a2b14173a82e21b47ff50a13d6991f8e4030f1ff7f0d28cb56290c67a3406406e58448fa13b2114d19240569214b4f21a17f58a3da5ae0da235a920f6d8ec512712c0c225e141d6002f9f808131fd67be67f1f8801365a9a06eaaaff30c4df2482161bde45c53a82248568abd8876830c9807818d294f75d3b8436ec5c2c3bd6a417c110ba32a1a8e0b1056b8c9f2ef5ff13b474c8ed635ade25fb0db314f4523d758051553b301916fa2134252e917eeb006a1115b7aaa8488137d47048543e4da504b7628ef494ba63bf8a59d1f8f64818f01fdd0b68c7a0d6c01fb6e87e4e62