prod-codd-admin.sfo3.internal.digitalocean.com

- DigitalOcean, LLC -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:ab:d1:aa:64:6a:9e:33:58:2a:9b:68:c4:34:70:f9 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DigitalOcean, LLC

Organization: DigitalOcean, LLC
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:d1:aa:64:6a:9e:33:58:2a:9b:68:c4:34:70:f9
Serial Number (int): 6209047269421303840204898818166386937
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 75:cd:5d:20:02:f0:20:21:22:1d:33:16:fb:00:cb:8e:81:19:bf:04
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): c5:77:4d:25:d0:ae:b4:08:15:6f:b1:4f:a4:0f:21:07:46:27:f8:e2
Fingerprint (sha256): 0f:53:70:2a:42:bf:49:c3:82:82:63:59:55:c1:71:21:0d:63:ec:35:3b:41:40:bf:1d:61:c0:eb:c8:e4:f5:e0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate prod-codd-admin.sfo3.internal.digitalocean.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-codd-admin.sfo3.internal.digitalocean.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-codd-admin.sfo3.internal.digitalocean.com
www.prod-codd-admin.sfo3.internal.digitalocean.com

Other certificates including the domain name digitalocean.com

(limited to 100 certificates)
www.demo-tourismconnects.ca
india.polo-development.com
p.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ideas.digitalocean.com
tsunami.digitalocean.com
digitalocean.com
investors.digitalocean.com
p.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
betastatus.digitalocean.com
pages.support.digitalocean.com
www.demo-tourismconnects.ca
p.ssl.fastly.net
p.ssl.fastly.net
dns-vetting1k.map.fastly.net
www.visitor-friendlyalberta.ca
dctrack01.nyc3.internal.digitalocean.com
go.rescuevocations.org
m.ssl.fastly.net
groove.digitalocean.com
trinityu.trinityconsultants.com
email.comms.digitalocean.com
investor.digitalocean.com
p.ssl.fastly.net
m.ssl.fastly.net
m.ssl.fastly.net
www.visitor-friendlyalberta.ca
anchor.digitalocean.com
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
groove.digitalocean.com
rewards.digitalocean.com
www.visitor-friendlyalberta.ca
m.ssl.fastly.net
au.lakeshore.com
dns-vetting1k.map.fastly.net
www.frailtycertification.com
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
p.ssl.fastly.net
m.ssl.fastly.net
m.ssl.fastly.net
www.trainwithpassion.ca
www.visitorfriendlyalberta.ca
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
brand.digitalocean.com
ssl3926.cloudflare.com
www.visitor-friendlyalberta.ca
investors.digitalocean.com
p.ssl.fastly.net
emss.goldfin.ca
www.ekgguy.com
www.learn-rto8.com
www.demo-tourismconnects.ca
dns-vetting2.map.fastly.net
p.ssl.fastly.net
www.visitor-friendlyalberta.ca
www.digitalocean.com
m.ssl.fastly.net
www.visitorfriendlyalberta.ca
ssl503536.cloudflaressl.com
dns-vetting1-mims-pawel.map.fastly.net
m.ssl.fastly.net
www.digitalocean.com
www.visitor-friendlyalberta.ca
b-0.hexagon-cdn.com
events.digitalocean.com
awesome-actions.com
digitalocean.com
www.visitor-friendlyalberta.ca
www.visitorfriendlyalberta.ca
rewards.digitalocean.com
dns-vetting2.map.fastly.net
www.visitorfriendlyalberta.ca
www.digitalocean.com
*.internal.digitalocean.com
m.ssl.fastly.net
dns-vetting2.map.fastly.net
ideas.digitalocean.com
prod-codd-admin.sfo3.internal.digitalocean.com
marketplace-frontend-nyc1.digitalocean.com
www.visitorfriendlyalberta.ca
dns-vetting1k.map.fastly.net
anchor.digitalocean.com
www.trainwithpassion.ca
m.ssl.fastly.net
www.eatandlearnnm.com
www.learn-rto8.com
betastatus.digitalocean.com
ssl503536.cloudflaressl.com
m.ssl.fastly.net
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
www.visitor-friendlyalberta.ca
dns-vetting1k.map.fastly.net
www.pathwaylearningnetwork.com
dns-vetting1k.map.fastly.net
p.ssl.fastly.net

Certificate

The complete raw certificate details for prod-codd-admin.sfo3.internal.digitalocean.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ijb9MyjAXYK1HUb0oZJ
S5+HINazJptZvKgTRXirVm+N3prWwwsluIrq4qLdXusecYyJHJ8zLIL0/4vFHW0Q
NUN0Nuv+azjWhPNSIlAaoJfNmN9yoW4/vyBhTS8BhvPezGWudhva7Qv9ddFzmqxh
U9um73DRe8BRDQ3An2tVAoTaI+urAlcS+46rElxwTCxfV9FIaWaXeciYqui+4zMj
ETk+LyFrGbOH4GA9RlkEEM0LobPBK8wU8c/qSIOh05XWlrxTVVx35n+qN1OLf/Kc
pV2FIC74nPTUu20d3VEUs1yXoCpwkA1cKspgMbGuNOW5DOKyNOQL1V5dDxQ5EoeQ
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6209047269421303840204898818166386937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigitalOcean, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-codd-admin.sfo3.internal.digitalocean.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26530192467352056989768579486500793344687918543647420067356472744703937154410313714581289234243778930037651863458232667005706015095746398976663498657572599851892691020337557651766527848998342952023827067516383081667050687727560291220662568674230035814836287054489045388602755858961315006899523804357261697881684601830259488007911815916107164394518024455503075250946574444604342854623266907815085602850120188215598430854459737890245857948193751341722255151548894960595249335357726262290060540003760370105407930351433842511498421013340897540148625282105255469356131390010329574683862022228702904247619257664948515868803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75cd5d2002f02021221d3316fb00cb8e8119bf04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-codd-admin.sfo3.internal.digitalocean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod-codd-admin.sfo3.internal.digitalocean.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0058e5fd1bbbe3fb2f286149e914d02ac1f3fb5032b18dd8404f3edf83ad99d81019ddddb0c88190564e3d1993ecb79db645b62ecd390fe3c85ce69cfb2787d0a1073398c9341bbdfecb4307842dfc931925058fcdc50e8a01a342f11da24ad4a2dd7b528387114e1aee32a7410c93dc74671023e60cecf011296cf1774697ccd074dfd84793bf1702acae4489e8abd252eb96d1e952e656ea7f2b35c456d6d19859972551f240bbd640a5406c3d287ae20f79e9cfd12bb9b1e6b82bc0314959a999c3b132222aade81eb853b18a1552da42901a86974a98b97321c60bd121a4361b3f4cce8cc10e7f982c9529225a12c71d1c9f85f40835ddbfbbaab8fe8d71f8