ws.libertycolombia.com.co

- Liberty Mutual Group -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0c:94:ca:46:ea:0b:61:1c:92:ce:2a:14:74:8c:87:7d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GCM
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:94:ca:46:ea:0b:61:1c:92:ce:2a:14:74:8c:87:7d
Serial Number (int): 16723298549626707678644085336981669757
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:f9:6e:fc:59:10:64:13:3a:77:39:76:96:74:f0:f7:17:dd:52:c0
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): f8:9e:4a:6a:93:27:ba:25:f0:1f:16:03:da:e7:39:a2:c7:18:c1:08
Fingerprint (sha256): 11:4a:b8:fb:a0:a0:37:6b:4a:e7:57:33:dc:cf:ef:24:e9:47:ee:48:66:9a:55:7c:0a:19:ed:e2:a5:7e:ab:08

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate ws.libertycolombia.com.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws.libertycolombia.com.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws.libertycolombia.com.co

Other certificates including the domain name libertycolombia.com.co

(limited to 100 certificates)
uat.mediedge.com
www.libertyinsurance.ie
libelula.libertycolombia.com.co
libertyseguros.com
awsuatext.libertycolombia.com.co
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
web05.libertycolombia.com.co
uat.mediedge.com
uat.mediedge.com
libelula.libertycolombia.com.co
www.libertyinsurance.ie
wls.libertycolombia.com.co
webapp.libertycolombia.com.co
capacitacion.libertycolombia.com.co
capacitacion.libertycolombia.com.co
www.libertyinsurance.ie
ws.libertycolombia.com.co
act-meucotadorfrota.libertyseguros.com.br
web03.libertycolombia.com.co
uat.mediedge.com
libelula.libertycolombia.com.co
www.libertyinsurance.ie
web03.libertycolombia.com.co
webssl.libertycolombia.com.co
wlsnonprod.libertycolombia.com.co
webssl.libertycolombia.com.co
pymes.libertyseguros.co
pymes.libertyseguros.co
uat.mediedge.com
uat.mediedge.com
wlsuat.libertycolombia.com.co
webmail.libertycolombia.com.co
web02.libertycolombia.com.co
pymes.libertyseguros.co
libertyseguros.co
www.libertyinsurance.ie
cobogexpresswaye.libertycolombia.com.co
www.libertycolombia.com.co
www.libertyinsurance.ie
oficinaenlinea.libertyseguros.co
libelula.libertycolombia.com.co
libertycolombia.com.co
capacitacion.libertycolombia.com.co
web02.libertycolombia.com.co
www.libertyinsurance.ie
www.libertyinsurance.ie
web03.libertycolombia.com.co
act-meucotadorfrota.libertyseguros.com.br
uat.mediedge.com
aplicaciones.libertyseguros.co
webmail.libertycolombia.com.co
web03.libertycolombia.com.co
www.libertyinsurance.ie
webmail.libertycolombia.com.co
webssl.libertycolombia.com.co
webssl2.libertycolombia.com.co
libelula.libertycolombia.com.co
www.libertyinsurance.ie
uat.mediedge.com
libertyseguros.co
www.libertyinsurance.ie
libelula.libertycolombia.com.co
wls.libertycolombia.com.co
pymes.libertyseguros.co
www.libertyseguros.co
web03.libertycolombia.com.co
www.libertyseguros.co
www.libertyinsurance.ie
www.libertyinsurance.ie
aplicaciones.libertyseguros.co
web05.libertycolombia.com.co
www.libertyinsurance.ie
act-meucotadorfrota.libertyseguros.com.br
libelula.libertycolombia.com.co
libertyseguros.com
mailcol.libertycolombia.com.co
act-meucotadorfrota.libertyseguros.com.br
webmail.libertycolombia.com.co
webssl.libertycolombia.com.co
act-meucotadorfrota.libertyseguros.com.br
libelula.libertycolombia.com.co
uat.mediedge.com
libertycolombia.com.co
uat.mediedge.com
libertyseguros.co
libelulaapp.libertycolombia.com.co
uat.mediedge.com
www.libertyinsurance.ie
connectapp.libertyqa.pt
wsqa.libertycolombia.com.co
webapp.libertycolombia.com.co
wsqa.libertycolombia.com.co
webmail.libertycolombia.com.co
web03.libertycolombia.com.co
web02.libertycolombia.com.co
web02.libertycolombia.com.co
uat.mediedge.com
web02.libertycolombia.com.co

Certificate

The complete raw certificate details for ws.libertycolombia.com.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzYufPD5KtUysAq3ktfa
Vj6cCHjOG6iraCUDpaVbx2qCSIFHzSLffwRaoS9mP5+o1jqeCY9/u9K25Nc/cm3y
H+V1XTLCMfUFN8TyF09dU9m5bTh62cOfdPbTpbAHrGtWeBVWrhjBPRfNR15UTQNB
+HsNyaY0TptBL8/NfbTFOGDFE8KQIL91xIQ2znKtNmqXkcto3UngxtkZ/AbO6X74
I7UQZc3SWUJkHIfLzqyegR3l1bdho2oUq//4M42TZAYj6fAi94iEtNO+9AVXfmt3
WGS+oZJR67LvoI1lC4BiqLSodDkXqgMUmHY8N3oVShbDfoxYfqt7hFJElSDQsv5Y
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16723298549626707678644085336981669757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GCM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws.libertycolombia.com.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24643187408150894126394044309371607479441180197040802014329995051896267333715084316831075232774660719064439997671271966570858316908111028905016829582893609760891228445908023967473929970955013991486481593762418461967475809220522191814874703601777091523216849381326786769942917769452005843359020915093868883824167539290768060553409940621160413700858703598885553904151439731045763885375244566540233523866666937686734272283845251509916236891634512294648532087346947033470141233439064296652829647225008168762548514630515012296351820311971455433272590631556904211192072350354954767936939022977287005411735010682718392309951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bf96efc591064133a7739769674f0f717dd52c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.libertycolombia.com.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036a670dbf90e3bc331902b1ba9f537546db2985f6404a5ee93f57f10ce947d65dcc8989fb4b398cf5e7fa1ee2229a87fbe68d9b02fd2287da998c50fc6b2e336d36e3b735cfa221ba9a21a1063d4cce84d14d41d4bd4de368d92942265315a6290e8cdfe27dc1a8f89e25b0a9304d5b14c7feb63884fc03892b0f81ff7c6611df452a0bc5dce424490b47f4612b559b3412a21cba465bbe99a85a7cc4f45a391808f73bfbd37093661baebc13b28b2f7ae8a4ca3efbdb731f096edf4203036972c7d03264b62d33e679894aa466f530b8637622a61f06c5fccd90220c350809b6020aec1e1dbef5d9637c806a52b85afaccc5aaac704c7604522ff485590fa2b