ac4.dev.minfin.be

- Service Public Federal Finances -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number a9:be:48:8d:f0:2f:8f:62:7e:fd:45:95:39:8b:f8:3d was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Service Public Federal Finances

Organization: Service Public Federal Finances
Organization unit: 0308357159
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): a9:be:48:8d:f0:2f:8f:62:7e:fd:45:95:39:8b:f8:3d
Serial Number (int): 225627539269768676187689532554784536637
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 69:27:50:f0:2d:39:b2:20:76:10:aa:ee:ed:81:4a:4e:1f:9d:7e:30
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 8c:63:74:22:23:8e:02:77:f7:37:23:65:05:87:16:d1:db:11:11:25
Fingerprint (sha256): 0c:fb:6b:3e:09:19:12:ae:a3:ce:b9:6e:2d:55:8b:9d:24:83:d0:0c:64:42:bb:e5:9a:02:6c:90:e8:5a:aa:bb

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ac4.dev.minfin.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ac4.dev.minfin.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ac4.dev.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for ac4.dev.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtIsBjO88itUOKPFPxwxS
NWhy25wiqkBwmFetufC+/D0C/eypHqQGetFQeJhSI6NobDn1tNr9H7SRyH36Mc/6
jEhM6Wvx5zD9VBox7Dzh6F+HaEJWOqm64wH+44E5MKu9nnHT8xiuI1AZNQ7Sra7z
mB6+QqymXIP8+uakyLfj/GD7liu8ECyyo7Vzta7pRY0M6i5cDig0uaQmYcWqwMoC
ruZalqgvVZn5JNySSbNwakgO8tu9LpDU0EMxdAjmDXprJGO0fnTS4MSqHa+0KgA2
Mnb9o0ISKLw0RT/zdN6PBjEcY4oYsO61Tq+5sAnSIo+9UAqTSe/h7zPEZKo4yQ+V
xaowS6uTkIallTfKfXuRWDxDI304urcZ+hcMj5nZHQAwE3go9p1N1IgJ2taH6hOt
7kn42vyL7170MhHbg7DhL3GCgs02IUWfT092Rm7IQfJ38+zY5ZnUln3sxRNeLkIS
9TWtHSXSSvzBnUTuU7qiu3l66lztdv/HwciejeEwRikqtWzbI9pRAU8D1pmlqej4
p3lpRHZurRxh8K8jW/KrniTtA9DNDoa3bBe4kvMORuk15oY7AD2N9kttAdmSXao1
XfwUMx560I1cqSxJuGQBYDPca0HfCIrgsgwit07a7SBQArPab+7m2vZiF8Z6cDJA
HACe1s2w+9Z1KPwYn3YwLBcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 225627539269768676187689532554784536637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0308357159'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac4.dev.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736551148004554559348718069934052264708324223426553394599833214159522823685742787231011958813626761469079749861170210042221493834589306445647168815098337873708212118956117875246422660304554012200672938858039778158788020628574725130275303561942694494398566371799389184126208410972814424296500517393129988223244612439636938618662739082822150497215074936026566698403435374918027796690524773513528468311533418712710964292284327831265792573927261312779897264938663621215168520710133712339184465081126718478466950566178845045818807453049000949173605220730704471230112025863383696842707605109114198413955412116640584149060794227934868391068226865692307460397926410201524937680728667453933682392844217072611181008049546138378420301498306487308039726369022059974806021409576029973159800997017502825942118562628487033990718894458461332206251183698981201267371118493857831394106531950721117772562222721697502899601274874048281058877613184749897010738775408114921857932735215087190542121050303666980427403655040340516639685249670114014830613953466246920650674420618258765008034514911790096276746174940207467972905671944937789472801242878831304815444280485007827305169037390613978532641478485427358611736804357436651973322854192036673532669733911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							692750f02d39b2207610aaeeed814a4e1f9d7e30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac4.dev.minfin.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00861d9aedb6e692292796628c2c3c0ead5e9d964d3f1e7237b97178dfecb3eaced74ec9af91b9ded8710fe35fd5254861ddbbe865ec61a20b63bee59486444509797582009260dd152f3e1c0adb275bec560bac9cad40f997526fadb5e7d55b7a58c19a93e993da9f30f2f95482780a55e5a2e2b190243e6f1eb521ebf84b1fd672e0fd024d956c6273a6b7419f26847e0465b97d14fb8606a84b3a90e610640c837d544010a90543fb021524538b1de0316e19efb83641ea2593d82f04822491460423e3fe17c425888547824f6bd0bf478086b7d1564254ff7c59ccf0bcb724189979a7552dfb0bebe48999245579a76a1c8e4b85da576e63520c21f923626c839c1879364ddd900eb91930e8ab0093fed6c5aa3031a6d916c0547195989ae99cfb9edf019bb4745ec04c5d01aaaa5c9ffe182602383359b7ad6e0a8fa462fe196d4921f0656db4acc63ab9e824982398cd49ed5be1731f34a938239382743d2838ea50f48a6ca846722de15e65e964b19d12972cfe0d684283ddabfaf87611a5ee002bc747a075a95f6ddbb6b4243800982c099c2f7d89df8f267b4a0e18781625c27d4aabb92e2b0ff7cfc65f60976008c72ebfc1f7ac83e3790a231957db9cb9f10497aa4a2a5d3037042f64a60429b1fe02ea29527cd942c82202e130c27847774a64393a7d2784b95e8d919eaaba04493ae0404371e31dee41ebd4b26c