design.sgmarkets.com

- Societe Generale SA -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 13:8f:0c:dc:af:4f:e6:e9:ac:f7:05:b9:c2:20:6e:ff:e4:40:71:cb was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
Organization unit: 552120222
State / Province: Île-de-France
Locality: Paris
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 13:8f:0c:dc:af:4f:e6:e9:ac:f7:05:b9:c2:20:6e:ff:e4:40:71:cb
Serial Number (int): 111660951651624507981176351074150859063246746059
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 1a:c5:f4:e4:7a:9e:8d:25:b0:85:1e:cd:14:e3:08:d6:94:80:06:18
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 36:75:1b:b4:10:72:5f:cf:76:7b:5e:57:ef:80:df:32:3c:f4:40:ef
Fingerprint (sha256): 0e:5e:f8:04:53:6b:38:cb:9b:31:15:2d:3d:04:2b:66:6f:a0:b8:1d:74:06:0c:8c:3e:37:4a:5e:a9:a1:8d:cd

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate design.sgmarkets.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for design.sgmarkets.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

design.sgmarkets.com

Other certificates including the domain name sgmarkets.com

(limited to 100 certificates)
rfp.sgmarkets.com
youtrack-api.sgmarkets.com
fic-uatrc.sgmarkets.com
shared.sgmarkets.com
nirvana-nycprimary.sgmarkets.com
*.sgmarkets.com
riskworkflows.sgmarkets.com
volhub.sgmarkets.com
shared.sgmarkets.com
ic.sgmarkets.com
sp-docapi.sgmarkets.com
sgmarkets.com
custody.sgmarkets.com
sgmarkets.com
Stratlab.sgmarkets.com
cty.sgmarkets.com
myhedge-staging.sgmarkets.com
crossborder-uat.sgmarkets.com
eqdflow-uat.sgmarkets.com
lab.sgmarkets.com
gbds-uat.sgmarkets.com
nirvana-hkprimary.sgmarkets.com
1dfinancing.sgmarkets.com
tradematch-api.sgmarkets.com
Mybilling-h.sgmarkets.com
valuation.sgmarkets.com
myoprisk-h.sgmarkets.com
ushronboard-dev.sgmarkets.com
www.warrants.com
api-z-dev.sgmarkets.com
dt.sgmarkets.com
cty.sgmarkets.com
SSO.sgmarkets.com
riskworkflows.sgmarkets.com
riskworkflows-beta.sgmarkets.com
sso-cert.sgmarkets.com
emars.sgmarkets.com
www.societegenerale.fi
techweek.sgmarkets.com
eqd-uatrc.sgmarkets.com
design.sgmarkets.com
myoprisk.sgmarkets.com
myhedge.sgmarkets.com
riskworkflows-beta.sgmarkets.com
sp-preview.sgmarkets.com
t.sgmarkets.com
billing-v2-h.sgmarkets.com
ic.sgmarkets.com
fic-devint.sgmarkets.com
lisa-preview.sgmarkets.com
sso-uat.sgmarkets.com
cty.sgmarkets.com
kyc.sgmarkets.com
selfcare-hom.sgmarkets.com
finestrat.sgmarkets.com
sgmarkets.com
cty.sgmarkets.com
www.warrants.com
t-monitoring-web-shared.sgmarkets.com
dview.sgmarkets.com
cprofit-datacollect.sgmarkets.com
listedstructuredproducts.com
ic.sgmarkets.com
riskworkflows.sgmarkets.com
Stratlab.sgmarkets.com
crossassetfinancing.sgmarkets.com
cty.sgmarkets.com
cprofit-correction-uat.sgmarkets.com
securitiesservices-api.sgmarkets.com
analytics.sgmarkets.com
analytics.sgmarkets.com
static.sgmarkets.com
advisoryfinancing.sgmarkets.com
listedstructuredproducts.com
www.warrants.com
securitieslending.sgmarkets.com
t-apigateway-kong-test.sgmarkets.com
confirmation.sgmarkets.com
t-helpcenter-widget.sgmarkets.com
smartcash-uat.sgmarkets.com
www.warrants.com
tradematch-api.sgmarkets.com
nirvana-parprimary.sgmarkets.com
api-z.sgmarkets.com
developer.sgmarkets.com
api-z-dev.sgmarkets.com
emars.sgmarkets.com
1dfinancing-api.sgmarkets.com
stratlab.sgmarkets.com
sso.sgmarkets.com
creditportfolio-demo.sgmarkets.com
test.sgmarkets.com
Api.sgmarkets.com
advisoryfinancing.sgmarkets.com
www.warrants.com
analytics-webwizard.sgmarkets.com
sso-cert.sgmarkets.com
valuation.sgmarkets.com
www.warrants.com
valuation.sgmarkets.com

Certificate

The complete raw certificate details for design.sgmarkets.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9ZhUPI+6lV3bSUjfGqH
+l5ptaVgpp9ioVzuApkcBqFMfDTAiDD7VxzGMnxD6m9qah0vRpbjHvyk5pxPU88W
IGLnYofI16FQLSTu5CWTDxPMOHrV2gD5KjXhxxLR5WMTQyo1P6RnxEeGHtq+Zs4B
Bozro2yGs6RQoC0ZScW1MoKYo7y0x+nHY4oXU5At1w38pkJJkXt7eSMknhYJpYPR
WHt3mADV3rYlqd/wOQNoCR6PAmf0Su2+xse5DlY77ZfNBrQd0aI7a5A5U9Py1D/M
wteJe57q/x/9wQOSVgkjM1A3X13cgg2Q63SoLyzTdSZoE/4s05amRqr4XAuIONnX
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 111660951651624507981176351074150859063246746059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-29 12:02:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-29 12:12:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '552120222'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'design.sgmarkets.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20177605277367861533473567463243681003812496921689625398302190574396322804110182141108630270067505098576207404882187868151313195125526853101744898094332920667180961531715576561517725465522517920781639060382159812316479084835466223420870825664300119258213177813544797254793314290637954122848610749713064563278433898694476760466265335539608230181483219121636573361523766517980664864588197171751306228162877299736755720676149425828983016824774767252547065533483713033578377643311636591514889415111191273774877941975504991569840567440515748308816230894151422673275010137950308040498562896080119943204282606651127650441021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.sgmarkets.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ac5f4e47a9e8d25b0851ecd14e308d694800618
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016a69029e330000040300483046022100d654e095ab5009ec18ff64839d066b5a6dc7f712fa65a048058c5edf47982658022100f73ef81da48e9c71142db9d44c5492be7b6141d3c07542a446cdba9a1ab0c6220075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a69029e98000004030046304402206afc4ac1da233ccd23af6e5d00f33d994f59a2959d91ba2157aeb1a9af1d9f8a02203001441812d310f2466c1d7b8d82a2a0f2a20f44c440b8690670208e842c1802007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a69029e2e0000040300473045022100b32ef383d9bc2f1bc8a14ee1c5cc19aa89082214a05d405ada10ac4a6f75a16102201b136a45a127f96288a2a8370269e43e92ef98890918bfc6283cd77c17808fce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a3e63723d845b8c6360867a16a6c4adc1a77d67d8a11f51c6f098bcb1e54eb4dfcd9cdce76c32269b1fb802de9fcacfb780776fea66e6f02f8e7fd17c14c0c6a46b5ac6ede26d4d0d4c612b3613c5938199df16faa9d0287b42672b387905f77e48da7cf4d88f13fe6ad2842fbc0b373cb083d41d3e312f5548ea531b77e9fb21d7dfcaa02c20c8238c68126b3d3bd995e337674b1a0d47a2394211e6d7ae63d6b60ecd5ac85c025f769a788384ebccbab714aa2ffcd0cd5a5dd2797fbef528fa7e071accc496934ad97c95ea6c61f2bfba4de136bc6070de29212911e3e881762d509164388db3c2c248605f137f28b957c4b18975de8c2fb00c5fb037d580a2dba7263cf0b656b9c6a80b05ab214e67f5dff4eb80e8e7574bd997a8454eda3163eafb3595349b9e403b84191ae218add9556636d9735d3682f1ff9e109b13ee210f0d28f26ee262680dc754008ea1658564a77d42b2336481146f31a71d34eb994ee56a542d12cb6acd1f22d28e8bd4da8ae118765890271afb3f371ffe3ff28a4139ce8c1b2f849982ca283f93ee29dfc6dce0c290894926b3a8ea1e690af18f76d7a20406c286bbab4c0dad4bb939ee078c8b6a49a98ce91a3bdeb73846da017be94044900a4a56c2e3c316013bd7d13047aaf8033bcf227f7fd803e2c8907c8d23d8d387d833887a9aeae05942efddf8a0bcdd522d339644ff5e3c3ad3c