theses.ncl.ac.uk

- University of Newcastle upon Tyne -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number f4:6d:6e:56:23:7f:f8:d0:77:33:69:18:d3:3d:74:27 was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of Newcastle upon Tyne

Organization: University of Newcastle upon Tyne
State / Province: Tyne and Wear
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): f4:6d:6e:56:23:7f:f8:d0:77:33:69:18:d3:3d:74:27
Serial Number (int): 324899829218764831025756392834534831143
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3a:7b:c4:e5:e6:39:44:1f:a9:a1:23:e5:13:2a:59:ba:ea:5a:a8:ab
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b4:96:b6:96:b2:4b:b1:9b:8a:14:fb:5b:62:67:0f:68:c7:9e:9c:18
Fingerprint (sha256): 0c:34:6e:e8:d9:12:dd:04:73:2f:39:a4:e7:40:a6:38:8a:40:d1:7c:a0:2f:0a:91:f9:f9:0d:16:2a:ab:6b:ed

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate theses.ncl.ac.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theses.ncl.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

theses.ncl.ac.uk
dspace-test.ncl.ac.uk
dspace.ncl.ac.uk
theses-test.ncl.ac.uk

Other certificates including the domain name ncl.ac.uk

(limited to 100 certificates)
secureforms.ncl.ac.uk
s3pstatic.ncl.ac.uk
appsdev.ncl.ac.uk
payments.ncl.ac.uk
internal.ncl.ac.uk
mas-rfid.ncl.ac.uk
fmssso.ncl.ac.uk
dev-teaching.ncl.ac.uk
resviz.ncl.ac.uk
nbtr.ncl.ac.uk
pluralheritages.ncl.ac.uk
eams.ncl.ac.uk
fms-pghub.ncl.ac.uk
pluralheritages.ncl.ac.uk
theses.ncl.ac.uk
gateway.ncl.ac.uk
ping.openlab.ncl.ac.uk
postgrad.ncl.ac.uk
chc-silver.ncl.ac.uk
testwebfolders.ncl.ac.uk
s3pstatic.ncl.ac.uk
eptext.ncl.ac.uk
nattinastar.ncl.ac.uk
avsdadmin.ncl.ac.uk
belong.ncl.ac.uk
digitalcultures.ncl.ac.uk
netreg.ncl.ac.uk
mobdev.ncl.ac.uk
eams.ncl.ac.uk
cpd.ncl.ac.uk
belong.ncl.ac.uk
jobs.ncl.ac.uk
booking.ncl.ac.uk
www.societies.ncl.ac.uk
mynewdevplace.ncl.ac.uk
mistageapps.ncl.ac.uk
gateway.ncl.ac.uk
fms-tel.ncl.ac.uk
almaops2.ncl.ac.uk
postervote.openlab.ncl.ac.uk
ness-qa.ncl.ac.uk
pf-pilot.ncl.ac.uk
mobdatadev.ncl.ac.uk
libguides.ncl.ac.uk
fms-peer.ncl.ac.uk
openlab.ncl.ac.uk
commons.ncl.ac.uk
global.ncl.ac.uk
Inspections.ncl.ac.uk
cs-ldap3.ncl.ac.uk
lynx.ncl.ac.uk
learning-maps.ncl.ac.uk
learning-maps.ncl.ac.uk
ltms.ncl.ac.uk
fmsc-svn.ncl.ac.uk
eprint.ncl.ac.uk
staging.openlab.ncl.ac.uk
rockartcare.ncl.ac.uk
hassparticipate.ncl.ac.uk
hg.cs.ncl.ac.uk
tse.ncl.ac.uk
cms.ncl.ac.uk
webstore.ncl.ac.uk
digitalcultures.ncl.ac.uk
teaching.ncl.ac.uk
dg-0125-dc75dcd.client-tls.adestra.com
isis.ncl.ac.uk
eptext.ncl.ac.uk
mclined-online.ncl.ac.uk
ras.ncl.ac.uk
research.ncl.ac.uk
microsites.ncl.ac.uk
moodle.ncl.ac.uk
pdp.ncl.ac.uk
printing.ncl.ac.uk
dbadmin.ncl.ac.uk
sapnonprod.ncl.ac.uk
mail.ncl.ac.uk
rahmede.cs.ncl.ac.uk
dtse.ncl.ac.uk
igm-eln.ncl.ac.uk
union-staffing.ncl.ac.uk
data.ncl.ac.uk
theses.ncl.ac.uk
appsdev08.ncl.ac.uk
appsdev.ncl.ac.uk
theses-test.ncl.ac.uk
msedmini01.ncl.ac.uk
saptraining.ncl.ac.uk
pg-sas.ncl.ac.uk
commons.ncl.ac.uk
ce-gs02.ncl.ac.uk

researchtools.ncl.ac.uk
splus.ncl.ac.uk
catless.ncl.ac.uk
fmssso.ncl.ac.uk
fmssso.ncl.ac.uk
myprojects.ncl.ac.uk
fast.ncl.ac.uk

Certificate

The complete raw certificate details for theses.ncl.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk2Tz2d97OHWorDmTC68
R86mxsVw3YusU6UqDfw4KG9Jp3OjwA2yk/QEa12ozu9bJT17lDKwBNJH6SlUC3Au
a/o9Np5JU1LcOfEuaqmfo3a60BNjlgQzb69ciNmbEAtHZOXubJ+tJM/8RLBGbSpK
jJwCryMnWbZoh2xASKlab90BMp+/LfbRQ0Ij1wR1GisDH52uSlwxTU8MnbqK0tcz
V06raiKdcjqrxZb7FODc4CF4WRsAC/cwbHs+CY9v+7aeAxAUd5zMT/2t33wEhh8d
KYa/WZdlCF5y8QXgzbyMAvdpJMjIlCtb1bYCNSs39j/sATJQV6AC/7eXG1mtjD35
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324899829218764831025756392834534831143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tyne and Wear'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Newcastle upon Tyne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theses.ncl.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23518579557261976574864639301320606784936625596410733119655015100790175343747277596538497533658139470717445634997422240397290640026553434470493314520726859361162960293059674170498636235708562808060158880659295175491031792105176872234477558333561428074703566686262370771994011742400396316935558915012626112377032568814695441255420452321050219946153168732121367941730001872234695315479729562252971560386500558922724188424014658753505451532146843624405275665901925436346707078976445289772891793471095153695714451130899717002672959476012024127783592897460165398316992250988766179194354863129348018154851095779622847904119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a7bc4e5e639441fa9a123e5132a59baea5aa8ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theses.ncl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dspace-test.ncl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dspace.ncl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theses-test.ncl.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009c994543f14396e809968a3e397c343c0af34e43c69011ff22a47c2537728de45da3a3cf6401e30a48c7388dc962b4daf8eca6cfe3ca76773d2e1d2e8ec4568840dbe636c999c8357dfc9d65bd140b6356bd29444b86b42eba64276f9339ead4c61e8ca08adb21571b568fe926770b4ff1b5dac5723f5f24b2ac285be36d66197273e49ed095e7ecca8128e1147045be1b8f1474b01d08e1649784bef8233b921cc4d2a02fccb50243430494973d86689def828c9ea6582fbd31827af9c54a51a199d0fa4aece1960daec19b3581a03af5e59901d219933dd1b9fc79e87a85d677f5e55eb2362baf702478bee8b66ac78a089bc15caec247c4f2033c480b84018b30fafd9c4af90a116116175b4f0beec4fa43ec190eb32f9495f04bba88f0383fd60e83217a328c834a38e86c25b862ac83a28892a8d9a68d3e75fae4ff9d5ce889b20f9f59407c033ba3ae4209f0cbddd6206c5d293f5255a6cd9878fe1c5a75b8a04b24ebe0dca3bdaa6643ef33f3c02d317149e628321c44a52b8fe960cf615f4a2c389216c31bca062b32321b78824326f0effd349f5b96d4e3ff014e2c7dd2d36257a52dcfb93062fc1d219eb71dabc4cdf96b5b6070925f41d7777095a7258aea2e4849e810dc68984fd8b4789d5a7f11bff260a26e13e1e54b4ee029f8110687f8a46aabb65fe3a0043d740e7e05094b2d6183be738227402e41c309