web.sso.kyushu-u.ac.jp

- Kyushu University -

Issued by NII Open Domain CA - G5

About this certificate

This digital certificate with serial number 54:bf:aa:8f:a1:1e:28:26:cb:0e:b4:d3:0c:81:a5:80 was issued on by National Institute of Informatics.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Kyushu University

Organization: Kyushu University
Organization unit: Information Infrastructure Initiative
State / Province: Fukuoka
Locality: Fukuoka-Shi
Country: JP

National Institute of Informatics

Organization: National Institute of Informatics
Country: JP

This certificate has expire since

Certificate Details

Serial Number (hex): 54:bf:aa:8f:a1:1e:28:26:cb:0e:b4:d3:0c:81:a5:80
Serial Number (int): 112650339735036489690833880356550190464
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4e:e9:e3:9a:ed:ea:e2:e6:b8:60:a8:e1:04:63:37:37:b8:68:e2:30
AuthorityKeyId: 67:3a:3a:c1:6b:b7:1c:a6:41:46:39:30:84:c8:69:00:59:11:58:c1

Fingerprint (sha1): ae:80:36:1b:74:4d:b5:75:77:95:de:4a:6e:fe:86:82:66:80:b6:69
Fingerprint (sha256): 0c:0c:e0:af:b7:8b:99:81:e5:a0:4a:b6:28:aa:10:6b:5c:b3:9d:aa:44:10:7b:ea:4d:26:5d:22:9c:40:62:b9


Revocation information

OCSP Server: http://niig5.ocsp.secomtrust.net
CRL Distribution Point: http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl

Check the revocation status for certificate web.sso.kyushu-u.ac.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.sso.kyushu-u.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.sso.kyushu-u.ac.jp

Other certificates including the domain name kyushu-u.ac.jp

(limited to 100 certificates)
m602.m.kyushu-u.ac.jp
eq.kyushu-u.ac.jp
www.hes.kyushu-u.ac.jp
webmail.math.kyushu-u.ac.jp
hosting3.cc.kyushu-u.ac.jp
storage.iii.kyushu-u.ac.jp
mol.artsci.kyushu-u.ac.jp
konchudb.agr.agr.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
*.qc.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
beppu.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
app.icer.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
mpoint.cc.kyushu-u.ac.jp
www.icer.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
ku-portal.kyushu-u.ac.jp
message.iii.kyushu-u.ac.jp
storage.design.kyushu-u.ac.jp
okadalab.kyushu-u.ac.jp
career.kyushu-u.ac.jp
jinq-web.jimu.kyushu-u.ac.jp
www-shiken.jimu.kyushu-u.ac.jp
xserve.rche.kyushu-u.ac.jp
www.cabas.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www3.ir.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
ir-bi2.jimu.kyushu-u.ac.jp
ns1.edu.kyushu-u.ac.jp
hosting2.cc.kyushu-u.ac.jp
scmain.sc.kyushu-u.ac.jp
pops.dent.kyushu-u.ac.jp
hyoka.ofc.kyushu-u.ac.jp
setting.m.kyushu-u.ac.jp
www.share.kyushu-u.ac.jp
card.kyushu-u.ac.jp
syllabus.kyushu-u.ac.jp
portal.i3.kyushu-u.ac.jp
hosting4.cc.kyushu-u.ac.jp
sub.et.kyushu-u.ac.jp
auth.icer.kyushu-u.ac.jp
otrx.ed.kyushu-u.ac.jp
ask.jimu.kyushu-u.ac.jp
job.jimu.kyushu-u.ac.jp
sevo.kyushu-u.ac.jp
www.rheumatology.beppu.hosp.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
fs1.edu.kyushu-u.ac.jp
scserv.sc.kyushu-u.ac.jp
rengeso.edu.kyushu-u.ac.jp
www.leds.ait.kyushu-u.ac.jp
zk1.med.kyushu-u.ac.jp
vpn.jimu.kyushu-u.ac.jp
sc003.sc.kyushu-u.ac.jp
office365.iii.kyushu-u.ac.jp
ueii.kyushu-u.ac.jp
webmail.dent.kyushu-u.ac.jp
yin.cc.kyushu-u.ac.jp
koyukai.kyushu-u.ac.jp
*.math.kyushu-u.ac.jp
ku-cert.kyushu-u.ac.jp
ccl.scc.kyushu-u.ac.jp
arch.kyushu-u.ac.jp
www.artsci.kyushu-u.ac.jp
sw-web.cc.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
www.sec.kyushu-u.ac.jp
tutor.isc.kyushu-u.ac.jp
nursing.career.center.med.kyushu-u.ac.jp
medtechs.med.kyushu-u.ac.jp
cs.kyushu-u.ac.jp
gcity4.doc.kyushu-u.ac.jp
gp-card.kyushu-u.ac.jp
imaq2.kyushu-u.ac.jp
qenavi.eng.kyushu-u.ac.jp
ds.s.kyushu-u.ac.jp
web.sso.kyushu-u.ac.jp
wocmn1.gened.kyushu-u.ac.jp
itonavi.f.ait.kyushu-u.ac.jp
rad.dent.kyushu-u.ac.jp
kokusai.hosp.kyushu-u.ac.jp
isc.kyushu-u.ac.jp
dreams-d1.riam.kyushu-u.ac.jp
portal.isee.kyushu-u.ac.jp
soft.iii.kyushu-u.ac.jp
qpost.jimu.kyushu-u.ac.jp
aero.kyushu-u.ac.jp
sv01.triam.kyushu-u.ac.jp
goukaku.jimu.kyushu-u.ac.jp
str3.i.kyushu-u.ac.jp
hosting1.cc.kyushu-u.ac.jp
ud.arch.kyushu-u.ac.jp
www.m.ait.kyushu-u.ac.jp
www.lib.kyushu-u.ac.jp
www.geo.kyushu-u.ac.jp
portal.hq.kyushu-u.ac.jp
hibari.edu.kyushu-u.ac.jp

Certificate

The complete raw certificate details for web.sso.kyushu-u.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy29n4RV0wWPmpVSywJg
h46EpWxCiYqkgRTnmRN7q/WVwFNVwxJREXCOzkItoFA84bA2qdqlWHVSoZuJ8er6
TxZ7OmF1PRfx9MEMXEmpSSc6g1sj++2a/24r7u7j+6CHUB8lFpkUaaN+LwX/+KCj
RtkRVt/FbhxYmJkTWhnzU5VwTvQ2N/UnN+bOQnlsL95VTBIdqfSUS31QkmD6r2kG
w69+3BUkB5clpUU3p1LCrpg8shJ6ILb9MofY3FpyLtG7Fcipe19UQWw69yGvT0lI
XSYFhjWazGU35Te3b8YKg2ylD6rQTcCwNxaVikK7b+NbDpxVi9iItpSo7fP6aQ3c
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 112650339735036489690833880356550190464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Institute of Informatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NII Open Domain CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 06:57:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-27 06:57:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fukuoka-Shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyushu University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Infrastructure Initiative'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.sso.kyushu-u.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25648931495475313909204958148517901987959540462823822546418297966301296949218941049107965722026279102482175493505778682309646552184205208054311613614717288145590370591378879677966825462125374158475314554808688564540828953783490532030372189553454638301078722056406228038826857864785777018681113336849364973246190234308707376393815499611994276895871786394829925221846775914372910630499742053105758953349566066463001024432456942856455421110191209530628980431341573182574695176396647711811550421230091801404670090739296520704920972794142080560845708331724698031183722931105738367811020699061139303767805739655783963810847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 673a3ac16bb71ca64146393084c86900591158c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://niig5.ocsp.secomtrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.sso.kyushu-u.ac.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.32264.3.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repo1.secomtrust.net/sppca/nii/odca3/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ee9e39aedeae2e6b860a8e104633737b868e230
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00377ae28d725fd8e0b9da7b1f8fa4ee116eea6ddc56d9128a1542901561dfc37ff882eef7cb2965885a0d9997dddc633e06274b78748b4de480c034bd13dea3c81192cd5ffdb4798dccf4ff7b8709fbc69c9882851b4f5cf36263714404587c86f716d34d19d45eb3ef594922d79abf4d8bf75a40594731834ca12ebadc0f0535f0c8e5a59f792e1572d77dc894057d8a38eecb0cf0829b4510ff3e872da5bb060b5ebc091a40fb6eb1dcb17ed41e31f8d47e48b20105b4cde4f41d43cfe33abb51b5a8cb25e7747a2169c0e6ae7ec492f44327300a0fa5e2508f877eaaa276b54bcfdcd4e1e9afc2bc6ec56b5a6bba8c1065adb49f641c86d77dbd7704694ed7