achterhoekwerkt.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a4:fe:6d:43:c7:9c:05:78:04:3d:47:47:3a:e3:29:df:7f was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=achterhoekwerkt.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a4:fe:6d:43:c7:9c:05:78:04:3d:47:47:3a:e3:29:df:7fSerial Number (int): 317481357216337730933718140930197256003455
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 44:d6:4b:91:25:93:89:a2:8a:ee:6b:7f:17:06:b8:82:cb:3f:80:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d2:94:0f:a6:91:4a:a1:4b:45:b9:24:1e:a0:9a:0e:10:4b:34:a5:81
Fingerprint (sha256): 0e:e3:d1:e3:04:c5:3a:43:f1:45:18:90:3a:f3:72:80:17:ee:8a:15:90:cf:46:6c:db:df:ec:cf:cc:a8:97:54
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate achterhoekwerkt.nl
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for achterhoekwerkt.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
achterhoekwerkt.nl
arnhem-werkt.nl
regionijmegenwerkt.nl
twentewerkt.nl
www.achterhoekwerkt.nl
www.arnhem-werkt.nl
www.regionijmegenwerkt.nl
www.twentewerkt.nl
arnhem-werkt.nl
regionijmegenwerkt.nl
twentewerkt.nl
www.achterhoekwerkt.nl
www.arnhem-werkt.nl
www.regionijmegenwerkt.nl
www.twentewerkt.nl
Other certificates including the domain name achterhoekwerkt.nl
(limited to 100 certificates)
www.achterhoekwerkt.nl
achterhoekwerkt.nl
achterhoekwerkt.nl
www.achterhoekwerkt.nl
achterhoekwerkt.nl
www.achterhoekwerkt.nl
achterhoekwerkt.nl
www.twentewerkt.nl
achterhoekwerkt.nl
www.achterhoekwerkt.nl
achterhoekwerkt.nl
regionijmegenwerkt.nl
achterhoekwerkt.nl
achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.arnhem-werkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
achterhoekwerkt.nl
achterhoekwerkt.nl
www.achterhoekwerkt.nl
achterhoekwerkt.nl
www.achterhoekwerkt.nl
achterhoekwerkt.nl
www.twentewerkt.nl
achterhoekwerkt.nl
www.achterhoekwerkt.nl
achterhoekwerkt.nl
regionijmegenwerkt.nl
achterhoekwerkt.nl
achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
www.arnhem-werkt.nl
www.achterhoekwerkt.nl
www.achterhoekwerkt.nl
Certificate
The complete raw certificate details for achterhoekwerkt.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISA6T+bUPHnAV4BD1HRzrjKd9/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDMyMzA4MjlaFw0x OTA3MDIyMzA4MjlaMB0xGzAZBgNVBAMTEmFjaHRlcmhvZWt3ZXJrdC5ubDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO1Zw39Zqb9mw7BfxOCIqsjNA6rx Vija108XFVNATywgCUz2kMvDWumi3ZX1bgr5LKUeAQk8XWRUKcDCBe0HQBY8SKQ3 9whph0U+tt07iC5vn0s1+luUmt0I1DvJvfOi5z4uhIhyzBZyUKf230Wixvfszxp/ xhLlYpIwZKOs8FU00rHTZQrElLnfjcEMovAPez6xJHpCH8FXhbOjv8I+mr8wJ+ap YS5lro84PEzNdx8CVWJ5cMBdEnhuprw4Oon/M6IMbeeMp51gnxBNaaXry9qWzovC HEY09DkzTJ1LHUxGXG1bOb7rhijWa3oISwxNWLJv5pDwMry8mUW/w2Az38cCAwEA AaOCAv4wggL6MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQURNZLkSWTiaKK7mt/Fwa4 gss/gJcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzCBswYDVR0RBIGrMIGoghJhY2h0ZXJob2Vrd2Vya3QubmyCD2Fybmhl bS13ZXJrdC5ubIIVcmVnaW9uaWptZWdlbndlcmt0Lm5sgg50d2VudGV3ZXJrdC5u bIIWd3d3LmFjaHRlcmhvZWt3ZXJrdC5ubIITd3d3LmFybmhlbS13ZXJrdC5ubIIZ d3d3LnJlZ2lvbmlqbWVnZW53ZXJrdC5ubIISd3d3LnR3ZW50ZXdlcmt0Lm5sMEwG A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFp5azvpwAA BAMARjBEAiBFPMZ/lnlxHWv9rgyRSMQGMvzsoGjJfZtjWQ90RYW7zgIgdORc2CZ9 6vdUktFuWzerS3TCOrC39KAH34vobwqmUrAAdwApPFGWVMg5ZbqqUPxYB9S3b79Y eily3KTDDPTlRUf0eAAAAWnlrPAkAAAEAwBIMEYCIQDjBUKzsOGHEoMN/qQUzPhb ZvD5GFabjHpklZb5urca7AIhAJPm+vdpMtelP4K33NU7f1GzxQabisJTguXN7Djv MZzVMA0GCSqGSIb3DQEBCwUAA4IBAQCZy+s2fR0j3Diq39KM+fbLFROtlgKJt4Uc +amBNyXa2HSabGuOaYKB0E1IX7Ge81kar18OXu898D9d0QXNn7DUmtWgT5yqmwOp hA4Wn85VCzh3GnsSthNCQnD4+/uPd7Gv9/5JCquCUOEf+jZJUAanHCPiSmkq54tW lJDEs0MY7D/3UKwYiOdLENVviJhh8sNE9XayHRjBcvfjgXYVL5XYE2DneIjX/yH8 GtPjZYsVpv1/6XP1Vk4sGgV5z74II8Pxf2psnKwjqyKdZiuBRp5tbGBKA2zkR78w qxIU4kzrJKm+04cMPOL9nE9FzxrpbCePSe2SJk/HS0SDee9RQgqo -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VnDf1mpv2bDsF/E4Iiq yM0DqvFWKNrXTxcVU0BPLCAJTPaQy8Na6aLdlfVuCvkspR4BCTxdZFQpwMIF7QdA FjxIpDf3CGmHRT623TuILm+fSzX6W5Sa3QjUO8m986LnPi6EiHLMFnJQp/bfRaLG 9+zPGn/GEuVikjBko6zwVTTSsdNlCsSUud+NwQyi8A97PrEkekIfwVeFs6O/wj6a vzAn5qlhLmWujzg8TM13HwJVYnlwwF0SeG6mvDg6if8zogxt54ynnWCfEE1ppevL 2pbOi8IcRjT0OTNMnUsdTEZcbVs5vuuGKNZreghLDE1Ysm/mkPAyvLyZRb/DYDPf xwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317481357216337730933718140930197256003455 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 23:08:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 23:08:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'achterhoekwerkt.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29962742388414665743265531942989995473127640642589328965298480460133962288081703130798402862523348890527656456966650161056167550391886133623808224184012898331433598027297311118961099132458240644365726036133497891771549541460040216280268518682625104263303923196411139138676707862248582787024801495226816426789125638394001695651553782407143196268262006685220588914339275145929987264275104016182886601125215877892246413169677480113428921295533032177722342560694052069307489230106283508318057155590815474890533126324768701354696842265749470384798505745156588740634881301950866505772821685206089809097402806646798193778631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 44d64b91259389a28aee6b7f1706b882cb3f8097 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achterhoekwerkt.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnhem-werkt.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regionijmegenwerkt.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twentewerkt.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.achterhoekwerkt.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arnhem-werkt.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regionijmegenwerkt.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twentewerkt.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169e5acefa700000403004630440220453cc67f9679711d6bfdae0c9148c40632fceca068c97d9b63590f744585bbce022074e45cd8267deaf75492d16e5b37ab4b74c23ab0b7f4a007df8be86f0aa652b0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169e5acf0240000040300483046022100e30542b3b0e18712830dfea414ccf85b66f0f918569b8c7a649596f9bab71aec02210093e6faf76932d7a53f82b7dcd53b7f51b3c5069b8ac25382e5cdec38ef319cd5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0099cbeb367d1d23dc38aadfd28cf9f6cb1513ad960289b7851cf9a9813725dad8749a6c6b8e698281d04d485fb19ef3591aaf5f0e5eef3df03f5dd105cd9fb0d49ad5a04f9caa9b03a9840e169fce550b38771a7b12b613424270f8fbfb8f77b1aff7fe490aab8250e11ffa36495006a71c23e24a692ae78b569490c4b34318ec3ff750ac1888e74b10d56f889861f2c344f576b21d18c172f7e38176152f95d81360e77888d7ff21fc1ad3e3658b15a6fd7fe973f5564e2c1a0579cfbe0823c3f17f6a6c9cac23ab229d662b81469e6d6c604a036ce447bf30ab1214e24ceb24a9bed3870c3ce2fd9c4f45cf1ae96c278f49ed92264fc74b448379ef51420aa8