apigile.prod.enedis.fr

- ENEDIS SA -

Issued by DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

About this certificate

This digital certificate with serial number 05:d7:b0:75:ce:42:dc:cf:09:7c:5d:3a:65:0b:ba:41 was issued on by DigiCert Ireland Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ENEDIS SA

Organization: ENEDIS SA
State / Province: Île-de-France
Locality: Courbevoie
Country: FR

DigiCert Ireland Limited

Organization: DigiCert Ireland Limited
Country: IE

This certificate will expire on

Certificate Details

Serial Number (hex): 05:d7:b0:75:ce:42:dc:cf:09:7c:5d:3a:65:0b:ba:41
Serial Number (int): 7766062841129568034652633184550500929
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3d:8e:58:84:14:9c:7f:e8:32:0d:96:4c:ea:79:b1:24:a1:f4:3c:99
AuthorityKeyId: 18:89:e7:af:f0:28:f6:7c:ca:68:05:52:e1:62:d8:91:d6:16:65:60

Fingerprint (sha1): 1e:f5:f3:15:f0:2c:2b:9f:72:9f:8e:86:58:fe:52:a5:0b:c8:60:cd
Fingerprint (sha256): 0d:54:e1:5f:44:ea:60:5a:00:3f:39:08:dc:7c:84:23:3e:78:02:29:9f:ed:3b:6e:19:52:24:f6:46:c6:4a:3f

Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.eu
CRL Distribution Point: http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl

Check the revocation status for certificate apigile.prod.enedis.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apigile.prod.enedis.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apigile.prod.enedis.fr
*.prod.api.enedis.fr

Other certificates including the domain name enedis.fr

(limited to 100 certificates)
e-stock.enedis.fr
sikapa-iq.enedis.fr
ie-saas-test.enedis.fr
sge-perfi.enedis.fr
restheart.tmm.snatpool.f5ie.prd.lbp.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
m02.noe.ldap.prod.alpha.swb.enedis.fr
espace-client-particuliers-rec-dmz.enedis.fr
intrapreneur.enedis.fr
infops.enedis.fr
zep304dg.enedis.fr
espace-client-collectivites.enedis.fr
startmeup.enedis.fr
deck-recette.enedis.fr
gate3196.enedis.fr
portail-osr-prestataires.enedis.fr
espace-client-entreprises-rec-dmz.enedis.fr
espace-client-pprod.enedis.fr
pcyintplypdi001.neoprod.edf.fr
ws.inforeseau.api.enedis.fr
espace-client-connexion-pprod.erdf.fr
int-myaccess.edf.fr
gate3360.enedis.fr
portail-osr-prestataires.enedis.fr
mooc.enedis.fr
microapps.enedis.fr
herakles.enedis.fr
zec304dk.enedis.fr
data.enedis.fr
api.public.cinke-evolution.perf.enedis.fr
archivage-disco.enedis.fr
pcydmzplywfe001.intranet.edf.com
board.qual.linky.enedis.fr
mooc.enedis.fr
noeintplypfe001.neoprod.edf.fr
laruche.enedis.fr
api-lincs-qualif.enedis.fr
meciteasy.enedis.fr
zhb-rest.tmm.f5ie.prd.lbp.enedis.fr
gw.hprd.api.enedis.fr
geosite.enedis.fr
sge-b2b.enedis.fr
sge-b2b.enedis.fr
collab.intranet.enedis.fr
gw.prd.b2b.enedis.fr
mooc.enedis.fr
ie-saas-test-ri.enedis.fr
espace-client-entreprises-pprod.enedis.fr
portail-osr-prestataires-rec1.enedis.fr
dataposte-sei.enedis.fr
moncompte-qualif-legacy.enedis.fr
datahub.enedis.fr
espace-client-particuliers.enedis.fr
bali.enedis.fr
alexv2-apipra-pprod.enedis.fr
zep3322a.enedis.fr
noeintplypfe002.neoprod.edf.fr
iq-caraibe.enedis.fr
alexv2api-prdn-pjv-02.enedis.fr
data.enedis.fr
noedmzplywdi001.intranet.edf.com
espace-client-particuliers-pprod.enedis.fr
egmaops.enedis.fr
distri-raccordement-mco.enedis.fr
intq.ecoflot.enedis.fr
prd.apigo.enedis.fr
data.enedis.fr
zed331b5.distribution.edf.fr
espace-client-qualif.enedis.fr
ecoflot.enedis.fr
alexv2api-recd-izi-01.enedis.fr
datahub.enedis.fr
moncompte-qualif.enedis.fr
moncompte.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
brandcenter.enedis.fr
lincs-live-admin.enedis.fr
appamiante.enedis.fr
espace-client-collectivites-rec-dmz.enedis.fr
fournisseursdenedis.enedis.fr
facile-commune.enedis.fr
pp-smartpush.edf.fr
accueil-operateur.enedis.fr
smartgrid-solenn.enedis.fr
noeplyaccess01.edf.fr
times-services.enedis.fr
elan-service-iq.enedis.fr
apigile.prod.enedis.fr
deploisat.form.linky.enedis.fr
espace-client.enedis.fr
pki.microapplications.enedis.fr
posteclean.enedis.fr
agir.oi.enedis.fr
myaccess.myelectricnetwork.com
gw.prd.tmm.enedis.fr
arcam.enedis.fr
infoflex-partner-gateway-rec.enedis.fr
noedmzplywdi001.intranet.edf.com
moncompte.enedis.fr
ws.sikapa-RCC.enedis.fr

Certificate

The complete raw certificate details for apigile.prod.enedis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunAu6kP3CN+CvFkBDuBF
gaBcWaJ+oRmBKpXvjwjwMxZ02+TEU0C38ZBPSyoRMs4eLoUM/TZo9NNYdxuz0W2F
F1JX3lZDig4srOKfKeykf/C6M5AZoVKmSsuKSI3LzQOaKzfwApvt7UHb1xn0Lp0k
/ObjA+doUDD3ZuBofF/a8KG8U3HtDp0U1LKjpO1x+EyoUFYsr2KIXsXuudJJQhmk
UTDIidEmmxX3mK8ssmCoa6Iu10N2HZZOSBMHZOv0E7e8mkYv2CB2Hzq14Lt+wJ5u
2LlLpiDc01ojbTbmpPDJwz11Q+m/QxTcY1CcR/+VWDINQETub9FrJUvawAT1DRMf
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7766062841129568034652633184550500929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Courbevoie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ENEDIS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apigile.prod.enedis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23535644352022978803101379297274051316802755267362269323877777014006985752532669664051766898259404710928357105967829454762960114563437022490601248598519919609136313279849561686966979296178115674068914730318691474728384637128441551953681902908472081615394761822160689366704647689523341254226176211171811594598574092603964846607871651703316949905333834075112963378070921191550059704902733259132562497507477220349957141875243031336331782922594659744556634635279329734372978358892503689235155855575265032093252721176297591486474030548895080951803534177370138478113505290411982264378520855182027248819856701782152086495111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1889e7aff028f67cca680552e162d891d6166560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d8e5884149c7fe8320d964cea79b124a1f43c99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigile.prod.enedis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.api.enedis.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		004a0309e2d6f35fb980cef369d2493b051009af60faa67ee0b8fb3fa11b82898c4d2bd466073f0ff1565974b3af3235200df843ba0f4561e54c19b9f602531d3a62243a5c27b14e9945415bfd7d3c3e4bc40f00e4f6c767fd5038641c7a12b9cfd79d73b62f2bcde7a057560c7b53bec87106a6a3bbc45318f58e454410766930c2da855a0d75a6326dc6216ebb9e57cd60964c18dd8732799048a6086365c2e6cf534fd43e3536c29277503d3ac4726885f2e601d32458d7af3abbeedeac6c2e7f1d43bc2ddcdc303c9e9f962a7747fda01d7477d3d6278573d5a0e3be9df45386a437677e6b9e6b1dc7975476fb9f605755244af4d74995b02bc1e3dd256a0ed7dd9ab7e1137a3b09b6e30bc49215d74e728283df439fe63795c13b3f87b42eb16d90ab17666a2daacc356e7755677d7492f62eab0a315a0f5d12e6e1b22275d5b7b4b9a78f3167e541a9fa9e0c73f069a0096632067c650e42c7201378f836098a1508e5b8b61748e488e63124f3ce3c200a89aae52831e304b15bb6204448c44c2fb4c047e2cf89eddaa95029d4c7711d7df3d505587aa4d5b56436b2df86a105cb07a1e606f6ca870db263e34ffea6d0fe7f6e9501371de01fa5131ab44a233abd9c4c74dbc7d05d46d1256465e2cca7c159dcf57567ec8b5378e8a4503278e25d3c8fd2a9b31b56dd29bff247dc4fb243a90f5c2910d08e444960bf1036