eshop.se.com

- Schneider Electric Industries SAS -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 06:a2:12:ba:64:85:3f:f8:28:8e:66:30:61:02:bd:71 was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Schneider Electric Industries SAS

Organization: Schneider Electric Industries SAS
State / Province: Île-de-France
Locality: Rueil-Malmaison
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:a2:12:ba:64:85:3f:f8:28:8e:66:30:61:02:bd:71
Serial Number (int): 8816899916712820899425795403226987889
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6c:27:0d:72:36:50:fb:39:ec:45:77:dc:00:08:cf:1d:75:bd:6a:b2
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): c6:8a:98:12:b9:f4:73:c7:42:f4:b6:ef:ec:07:7f:0f:02:88:6c:ef
Fingerprint (sha256): 0d:80:d7:bb:fe:46:bb:92:53:98:f8:54:6a:49:4b:50:ec:18:87:cc:b4:72:9e:3d:ae:8a:b0:6a:eb:46:5e:21

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate eshop.se.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eshop.se.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eshop.se.com
eshop-ae.se.com
eshop-eg.se.com
eshop-sa.se.com
eshop-hk.se.com
eshop-id.se.com
eshop-th.se.com
eshop-sg.se.com
eshop-in.se.com

Other certificates including the domain name se.com

(limited to 100 certificates)
cds4.cvent.com
sni61165.cloudflaressl.com
sni61165.cloudflaressl.com
sni199070.cloudflaressl.com
ssl372726.cloudflaressl.com
sni188979.cloudflaressl.com
secure08.lithium.com
secure05.stage.lithium.com
secure08.lithium.com
api.canalverde.se.com
api.se.com
secure08.lithium.com
sni188979.cloudflaressl.com
sip-res.schneider-electric.com
shop.se.com
secure08.lithium.com
secure08.lithium.com
aliases2.schneider-electric.com
mysearch.se.com
ssl256155.cloudflaressl.com
ssl372724.cloudflaressl.com
san-12-s51.tlsprovisioning.exacttarget.com
backend-api.pes-ppr.se.com
aliases6.schneider-electric.com
app.ppr.schneider-electric.com
tic-api-ppr.se.com
sni199070.cloudflaressl.com
sni61165.cloudflaressl.com
www.schneider-electric.com
ssl256156.cloudflaressl.com
sni61165.cloudflaressl.com
www.schneider-electric.com
egovlab.eu
myseapi.se.com
www.schneider-electric.com
sni49383.cloudflaressl.com
cdn.canalverde.se.com
www.schneider-electric.com
shop-au.solar.se.com
sni188979.cloudflaressl.com
altivardprqa.se.com
sni199070.cloudflaressl.com
ws-sh2.schneider-electric.com
aliases2.schneider-electric.com
sni61165.cloudflaressl.com
myseuiaas.dev.se.com
uat.nlshop.se.com
mailtrap.uat.nlshop.se.com
sca-uat.se.com
www.schneider-electric.com
shop.se.com
shop-th.se.com
san-16-s51.tlsprovisioning.exacttarget.com
www.kuvert.se.com
se.com
schneider-electric.com
sni168267.cloudflaressl.com
opticon.se.com
keeperautomator.se.com
schneider-electric.com
suzuki.se.com
sklady.se.com
schneider-electric.com
aliases8.schneider-electric.com
confluence.se.com
sni199070.cloudflaressl.com
secure05.stage.lithium.com
aliases5.schneider-electric.com
*.dev.se.com
marathondeparis.se.com
admin.projects-ru.se.com
api.dev.se.com
sni188979.cloudflaressl.com
schneider-electric.com
solar.se.com
calendar-ru.se.com
aliases2.schneider-electric.com
lighthou.se.com
sni168267.cloudflaressl.com
sni61165.cloudflaressl.com
ssl372726.cloudflaressl.com
uat.nlshop.se.com
wesop-fr.se.com
aliases5.schneider-electric.com
shop-de-eu.solar.se.com
tic-api-ppr.se.com
cds4.cvent.com
mysearch.se.com
sni49383.cloudflaressl.com
confluence.se.com
eshop.se.com
sni49383.cloudflaressl.com
shop-au.solar.se.com
schneider-electric.com
mule.se.com
ssl258869.cloudflaressl.com
myarcfm.schneider-electric.com
mcc-api-ppr.se.com
sni238385.cloudflaressl.com
cfa.se.com

Certificate

The complete raw certificate details for eshop.se.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJbjg3YXf0WBuMMrqTfu
0/XulzEaSNoSoLhDaMK8nZelYquPKxVfz746ZZTxt3qtipU7FX1GBri612b4R9g5
01JzDFZ32dWHgC3z5izdjOrMyc6+ADEoWYoRTDsIB8OHsBYIMv63SfN8LUt3AYH4
P10Up+aTyeIsl4xtdAyTOmeikF+3U8cv2jGU/SZXwy9+ZT/JBv0flKkibcvUDdqd
J69JBWWREgKpzOHS4YXfSd1hFtn/ctqSYVL1n4539dv2EOmhW01EyPqJRSkPB5Bw
JuPKj9zBQgMg5TLc3CNyDk2bnpLNEZdV8AnST0b/TA/ai+Xe/CTWz3rwVzz3PR7S
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8816899916712820899425795403226987889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rueil-Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schneider Electric Industries SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eshop.se.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25322066996506175140419356997208449225949082789663884973692001693622156760597383724326658449625993970895295304355982406536378448085646048241712560918616835795674078970128086243321551975067752756449906027667982167132732855195081062902526628906916371643231394780541345316014409564248408806167403098894522206145301453206678862835496458307992280255518362867757190061404972949687880730942988583917759755383718323727557213405679687508137055091253364087434368831091265686872234713362739537546092495203593245485478382782529683931238740269427889140327110963721439867501841460606078862117886580828812038821242257207566511559297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c270d723650fb39ec4577dc0008cf1d75bd6ab2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop-ae.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop-eg.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop-sa.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop-hk.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop-id.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop-th.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop-sg.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop-in.se.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0001bedc017e88a540e484d1cc31deb354bd4519cb5d8caa2dbf0f7f3afafdf9c8a4eb6a673d62ef4408fe7b8f0ca98a7b251220d8c0e6872e70a8e7bf528f9562f4915e55bf7b550cae34bff8485bafd191f20f87f078bad4be67cbe7f5621a27c36ac239f1a82f324c98f1a2914944f27610d760ddf18e78247aa697257858ad0cd84e08cd3064c540d5f879efeaa4bd05077e19b2b9de3c43036dbda4f20f38fab6f4c82333e1ee203ad31049bc1181110ff5c42dd0f3eb6d880225911f7f2a5a935e7c2e9201292e53a5ec5057b10c17cd47d901ebe7445193b90bb76c846a71b4aed9d9464a28682081e099d997fc6a857ec091a3248257584652ba8af42f