trvlapp3935.cxda.medstat.com

- Truven Health Analytics LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:bc:e7:fe:1a:a7:e5:b4:9a:43:00:e7:e0:bf:2b:39 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Truven Health Analytics LLC

Organization: Truven Health Analytics LLC
State / Province: Michigan
Locality: Ann Arbor
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:bc:e7:fe:1a:a7:e5:b4:9a:43:00:e7:e0:bf:2b:39
Serial Number (int): 18260821123429761721607760245430364985
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 40:0c:a8:18:e4:d5:29:91:57:14:89:04:4a:00:62:87:49:b3:0e:85
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 9f:8f:77:84:ae:d6:ae:49:fa:59:82:1f:5f:3b:fb:1e:34:76:06:f5
Fingerprint (sha256): 10:cb:a9:18:1d:39:c8:99:c5:f9:26:10:41:01:56:80:d5:2c:b4:64:f5:81:da:28:e8:50:43:85:65:18:31:bb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate trvlapp3935.cxda.medstat.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trvlapp3935.cxda.medstat.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trvlapp3935.cxda.medstat.com

Other certificates including the domain name medstat.com

(limited to 100 certificates)
mdss.medstat.com
advantage58.medstat.com
onbaseapptest.cxda.medstat.com
medstat.com
TRVWISWEB01.cxda.medstat.com
advantage20.medstat.com
thfedididp.medstat.com
trvlapp3926.cxda.medstat.com
advantage07.medstat.com
gaedstestcog.cxda.medstat.com
advantage59.medstat.com
trvlapp4358.cxda.medstat.com
trvwadvsql09.cxda.medstat.com
TRVWCAWEB05.cxda.medstat.com
thfedidhm.medstat.com
support.medstat.com
tccdemo1.medstat.com
trvlapp3935.cxda.medstat.com
trvlapp2421.cxda.medstat.com
trvlapp1846.cxda.medstat.com
cobidmcognos.cxda.medstat.com
advantage27.medstat.com
advantage03.medstat.com
advantage07.medstat.com
advantage81.medstat.com
trvlapp1154.cxda.medstat.com
trvlapp0870.cxda.medstat.com
advantage2008.medstat.com
gaedsuatcog.cxda.medstat.com
advantage39.medstat.com
trvlapp1078.cxda.medstat.com
trvlapp4148.cxda.medstat.com
advantage38.medstat.com
trvwmiweb07.cxda.medstat.com
trvlapp0872.cxda.medstat.com
voltage-pp-0000.medstat.com
trvlapp3795.cxda.medstat.com
trvwedwuat02.cxda.medstat.com
infdev.medstat.com
apps.medstat.com
advantage26.medstat.com
cobidmsas.cxda.medstat.com
advantage08.medstat.com
trvwmiweb08.cxda.medstat.com
trvlapp3840.cxda.medstat.com
apps2.medstat.com
advantage11.medstat.com
trvlapp1156.cxda.medstat.com
trvlapp1552.cxda.medstat.com
advantage62.medstat.com
voltage-pp-0000.medstat.com
trvlapp3155.cxda.medstat.com
TRVWEVATAB01.cxda.medstat.com
advantage02.medstat.com
sdss.truvenhealth.com
leapfrog.medstat.com
advantage66.medstat.com
advantage67.medstat.com
advantage43.medstat.com
advantage16.medstat.com
TRVWMIDMZ03.cxda.medstat.com
trvwadvsql08.cxda.medstat.com
advantage64.medstat.com
advantage33.medstat.com
mdss.medstat.com
mihealthandsafety.medstat.com
advantage61.medstat.com
trvwbuptab06.cxda.medstat.com
medstat.com
halfreski.medstat.com
trvlapp3870.cxda.medstat.com
trvlapp0871.cxda.medstat.com
advantage50.medstat.com
TRVWEDWUAT01.cxda.medstat.com
advantage16.medstat.com
thfedid.medstat.com
advantage60.medstat.com
trvlapp3595.cxda.medstat.com
advantage66.medstat.com
thfedidhm.medstat.com
trvlapp0869.cxda.medstat.com
advantage.medstat.com
trvlapp1846.cxda.medstat.com
mdss.medstat.com
trvlapp1460.cxda.medstat.com
trvlapp3870.cxda.medstat.com
leapfrog.medstat.com
trvwedwuat04.cxda.medstat.com
trvlapp4093.cxda.medstat.com
trvlapp4407.cxda.medstat.com
TRVWAPCDPROD01.cxda.medstat.com
trvlapp1980.cxda.medstat.com
trvlapp0872.cxda.medstat.com
cdqmat.medstat.com
advantage43.medstat.com
trvlapp4122.cxda.medstat.com
advdev.medstat.com
advantage39.medstat.com
advdemo3.medstat.com
advantage58.medstat.com

Certificate

The complete raw certificate details for trvlapp3935.cxda.medstat.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yKG1yuRZU1E2hZIy8yZ
BWsuyQ7G42AObTf0Wszbyv3+KH/Xed0MwROX4QucKFc+uZJanlZuAMet6eujLq+i
vE+uoSZo1JchbP04F7DQ0ChqJGwFQzslds+fZGfbd2d3TUhP5bjhpY+SdmaoZ5OW
MZXGiLUUJ93gjK30sKVv7lucPcbvOGokLafUv0ZxpJUgHB8YsXq+vSE7EygS2asJ
EL33iKNinwvIZiuTb0Rk9beBdnoEEe3H5ar0StUEEt/WqJ6tYvAiQQSgnCkr7ePh
AXMuic/bmlIyAnCncv1AHD/ZrW9CPfW+9q8PRz6BSGamslyKjHJM1Qyog39ZoBS4
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18260821123429761721607760245430364985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Truven Health Analytics LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trvlapp3935.cxda.medstat.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28168167767985027142944724959214493333379988107264121245258188935063158695083365043554768244682441064577661992578664009332644933343373434233354056418041117938133154571750060432892842889898314589058980812304527761121170149992085199245918829307822944054835899171251317005006852708869152086849676409644373444411983155964558983611762977756467409389799660370862457560870138213597538475875793398531958599220158441255354440969928792468487366464127365731996097043766918710778949030841226141840254844189598823657377726110442211569098271495727735707060492209934982285745674830762382583348038194434101080924023051995525655345343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							400ca818e4d52991571489044a00628749b30e85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trvlapp3935.cxda.medstat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ec714b1fce68318767a2159ef9fa35120e2185854f93bef4205573cb84505827cd3ad68212246cafc4383458023373a95f9c472a38b690af0bb51a16cbbdb833246508b8bb3296730134376f154f90c2b829e82b75dde51bbd5616701fe521682b95920f8e35787ef8817653e2cb0a8ec97ddc829f76b6e7be7d18d214c027c75e5ee47be586c13604fa740a3503e07ba455f0ef3495efc0abe319d9682e52f3c4a1c57ee2a1c6b251f9b7f58e6fa761e8f3cd118070abeda0d23849475f59a767b61e7b4372edc454f58172d45ccb5b6d09d5b9a5eecd7cdfc6541e7eb062b97252601909f074d716e0f2030c914c8df653c2dc853121359e20e94ed7d57a7