hadznac01v.funkemedien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 25:4f:49:ca:66:02:a3:7e:a3:3d:1e:67:ec:1f:c8:1e:99:fd:cd:4a was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 25:4f:49:ca:66:02:a3:7e:a3:3d:1e:67:ec:1f:c8:1e:99:fd:cd:4a
Serial Number (int): 213000845460672074382194773743329310389108067658
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 78:b2:58:d6:ed:94:21:4d:cf:13:a1:85:c2:ce:1d:fe:74:9b:4d:fb
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): dd:f4:37:eb:eb:19:08:80:5f:6a:f8:a9:b4:74:2c:c4:85:e4:9d:7c
Fingerprint (sha256): 0d:25:72:79:14:d5:6e:40:26:fd:ca:ae:13:fa:8a:69:08:bb:bd:a7:ee:8b:76:ea:86:a0:84:02:0c:74:48:66

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate hadznac01v.funkemedien.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hadznac01v.funkemedien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hadznac01v.funkemedien.de
www.hadznac01v.funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for hadznac01v.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jKC19CS6O/zqEAZ7veg
usIf9oU3H2msXtHVCTSWEehO/tx35B4QDejsjiiV9BOObvH/rCaH3XC+XLbML6uJ
ZcbnkTHKGYF8bo6PLTeMo2bfUZLfEz3SS/kuuvGdUsjnAO4iXcIgp8iDeLnDHREq
33tMwjFPX8b477BZwYJL/7ar8oSliwJfnL3FHGdyxMLA1YojhCAiVsUOAWaK+AH6
QSMlwGJaVBNEQl89AmUuv977041xro2qCbm0ToDbZPRpqDeTsD31avuXkGyQ02Cm
vPrB0uewax0LZKLgth2RFX4LOuSBp53NfDErL1rGnbANkWpPTEa6cgVq99PIiC8k
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 213000845460672074382194773743329310389108067658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-29 08:25:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 08:25:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hadznac01v.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28049811656954556752942951276462485955677948708554270712687533711376238392171178392834381090760954978840307849874505049064538223897769924739471678248092311781529609427598637846932973776422331495828908862746853485375354405278425260260470153458827792104176257524690259294100497264491499497411321719783236144828996247496592368967296647953549883845787567324815204009824989404431774382398961708186367981445501414346787677793114891349814015344561147179210203780696034582543175002836213425801429666405500720728506890662477139705776954801607368538408403969647825614292743422298620914053525940232219259704276636810873186231481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadznac01v.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hadznac01v.funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78b258d6ed94214dcf13a185c2ce1dfe749b4dfb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (845 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (841 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008bdc3c20e3b6b7f86e5785d2b3c651c6721eba965894c5cac8d2e319f3aea2da058a5c4cd8f573b419a8793a9b736446a73d5603d72f554a237c8c0449a2067f394f145265db727c60cb263ca99167f971cf6830aead781a0441b1649c0c97bca8fafee147905938ce64aca2b450861f16665b4b7c5cba1aa7a792a10434cdb01bcdac264258568ebb3c571018eddc5ba2c8979d631a83493eb72739cce2236e05cae0fa5b59a4fde770673e41bafb28292c228748c76b874b9854aa5da1955f15fd9008a1241ba823901e62f80fe90b627d70475712afb7a0e3f050b727f9c12bc8f8133a073e06294f93a0117fef6a1d1d13c8b6dce8f2cc6960d17b015b461141dab76ad8988491ee0e2bb7c68d0f5bb16058a7da4e171f65589605ad3a7b5f1b6430f1ac0bfa661b87df7610d3f800aa9fdaf5cf082e69c7eac57ca5384f1982d4d4b8cd0f73f43965897828f12db0fc7157d23698f4f1bfdf89fe6a749c6b62261ae73a2196ec8a1176ee1b5eedb0ce90460dc28b6eabc0353a31a62ca806018b21ef45be287ac4a84a94e3bc74e13ce21300bc268d97913f9442f0aa746f231571f6c1c2afd4e4af986c911ac43cbb3178f09810d66b5534bd26d317e2ac0653d0eb87d89fa62b488d048c95c9a547d0813d6d1184d60d4354369a4484976089cabbc7ff246b9730b324adca00c09d53cbe8d98d3dc1808ab1394367bb