trasparenza.unicredit.it

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 6b:14:7e:c7:23:12:9c:5c:3c:d7:19:4d:78:0b:17:30 was issued on by Actalis S.p.A..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 6b:14:7e:c7:23:12:9c:5c:3c:d7:19:4d:78:0b:17:30
Serial Number (int): 142333812847025569801510487604719195952
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: bc:69:7b:93:2d:24:51:8d:06:6c:47:76:d6:e4:02:4f:82:ac:aa:d8
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 2f:9c:d7:e5:e3:b6:92:73:62:ae:25:b5:c1:29:7e:f9:95:e2:0a:ae
Fingerprint (sha256): 12:49:2c:27:15:4b:01:8d:96:2b:3a:c1:d7:58:d6:8a:cc:2a:a1:c8:c2:d1:27:0e:20:e1:b2:2e:16:7d:94:ef

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate trasparenza.unicredit.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trasparenza.unicredit.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trasparenza.unicredit.it

Other certificates including the domain name unicredit.it

(limited to 100 certificates)
push2.onemarkets.de
www.buddyunicredit.it
gestionedelibere.unicredit.it
www.unicredit.it
processihr.unicredit.it
via.unicredit.it
api.f4p.uat.unicredit.it
res-findata-uj-v3.unicredit.it
content.unicredit.it
www.empbw.unicredit.it
openaccount.unicredit.it
online-smallbusiness.unicredit.it
more.unicredit.it
www.premiocerto.unicredit.it
unica.unicredit.it
tls12.unicredit.it
ebanking.qc.unicreditgroup.de
globe.unicredit.it
akamai-san133.exacttarget.com
assistenza.unicredit.it
ucilearning.unicredit.it
finance.unicredit.it
www.unicredit.it
media.investimenti.unicredit.it
bankingonline-uccmb.unicredit.it
corporateportal.unicreditgroup.eu
mail.unicredit.it
clubgrandiaziende.unicredit.it
msite.unicredit.it
ial.unicredit.it
shop.unicredit.it
mbv.unicredit.it
pagamenti.unicredit.it
shop.unicredit.it
m.unicredit.it
trasparenza.unicredit.it
push.unicredit.it
onlineretail.unicredit.it
push2.onemarkets.de
www.circoloUdine.unicredit.it
geb.unicredit.it
unicredit.it
finance.unicredit.it
www.circoloBari.unicredit.it
m-uat.unicredit.it
imprendo.unicredit.it
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
clubgrandiaziende.unicredit.it
lifedesk.unicredit.it
mailing.unicredit.it
www.circoloGenova.unicredit.it
www.landing.unicredit.it
res-findata-m-v2.unicredit.it
guest-wifi-mi.unicredit.it
trasparenza.unicredit.it
mlocator.unicredit.it
digital.api.unicredit.it
www.landing.unicredit.it
ebank1.unicredit.it
assistenza.unicredit.it
ucilearning.unicredit.it
dimensionesociale.unicredit.it
mailing.unicredit.it
online-subitobanca.unicredit.it
online-retail.unicredit.it
www.unicredit.it
push2.onemarkets.de
sha2.unicredit.it
www.unicredit.it
corporateportal.unicreditgroup.eu
push.unicredit.it
openaccount-online.unicredit.it
www.gestionedocumenti-online.unicredit.it
trasparenza.unicredit.it
confidi.unicredit.it
www.buddybank.com
more.unicredit.it
ucilearning.unicredit.it
onlineretailbank.unicredit.it
www.unicredit.it
cyberfunds.unicredit.it
www.unicredit.it
unicredit.it
pagamenti.unicredit.it
newrsvp.unicredit.it
likeu.validazione.unicredit.it
mail.unicreditgroup.eu
www.gestionedocumenti-online.unicredit.it
click.aziende.unicredit.it
processihr.unicredit.it
onlineretailbank.unicredit.it
private.unicredit.it
online-retail.unicredit.it
www.unicredit.it
www.investimenti.unicredit.it
invoicecomm.unicredit.it
oco.api.e01.uat.omnichannel.unicredit.it
www.landing.unicredit.it
akamai-san97.exacttarget.com

Certificate

The complete raw certificate details for trasparenza.unicredit.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVdasBb0iBdXda3Cq++m
5O4ZTKuHZ0ke5V4aD79jxn3bBDBYWGBKRxUFmqiB/LkDnWz1TsvRoBUJHYSzGdIv
WC4c6VEaWfR1iBZVU+35N72iezHizjAzim/gxhq3uUlDxnpxT9flcbdePgGgfZvL
1+0Tt7UcD/hCHYreiKzHKFG2Z6OBYeRoMjG2+Ilzo64e3Nn2v83cbWPh5C9WcfZH
uGYT4ELl0eOSIxd1CZt/7qm9FzKthn0Pyv2xG6b28sWQPzOBUDtUutQbHalWV9FF
HVnc3PPcjgNCp5wvOFeytRlGHb0XBgOFDJVPjdfktWlj3x8uVQsLTCtj3aa8rROh
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 142333812847025569801510487604719195952
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 07:47:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-19 07:47:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'trasparenza.unicredit.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23397162404571415474260431832484961519505531469601654807025005121955327508387886720328531931840721827052096540479034100178775210020351263924643762242040472134684001312779955545625619293868912120259962773750373531646630628062147192978299660314316322345599710713731077161014366170896021978459167696840642730156508033801651754507588655404223689323733410221512415447403869340056892046083527247450598275736033562181411572054648647165972520562683551236552220700123817662118762797284418485031294111826844412010294341883747759785957958676319821448031451540116613832434991984471742788918193504593119477766149165478325477679453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trasparenza.unicredit.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc697b932d24518d066c4776d6e4024f82acaad8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0084a629b1b24274c52e07e97f764cdccc3030bb2801638fa0b31f48ae144382f831443c527608317cabc938c16a446e11836b1caa4299d8877ec8198cd11f7890f7fd5746257114b98269b51277b775b74d58c258750cf930e8ebc37acc45160b4e3f4a97b146e9bb5eac816ef9b37774083ded816ef0d609ce2a053903e3cf3060c356b5c0703d866c2ee8d90bc61d1303e28640616cb310aafa1802e8485ca3d758c67c23c974b58a8b533216b9bdb1d0645adbf88bb67548979de57808d38b6ef5d6bfd85ec9498722fde8008a8efc50b67ddd6abf0bdc9f87547880409d19a2c5273b4bd22fcc103576c0f3c2e1ad309bf0a9fb7ba881da5f5600afb560b797e47b2d8c897653e2eb3b6ba8bd9c6dba41f906fc61388e4e960af37717dd33233a4a55abe5e294976d95f553c7d6dee7bc5f1939ad18c038b2ff5c9036fd5753531d1c887956cb09cbc59538b1b7d7e2b50403837c74a1cccb56cd04af0751ec867958176832db9a7f90c8a050c483850d68f617e96e8db9ebc8fd44b336daae7e914d1bb16453ee72f83a28ecbb9394c0d489b8b707f271aae276c2412247218215a1d216b9e8877e978c59443e2b097f5df22020a4949cb433aecf6309701030abfcc5cc65341002a1e6e4a965ee5305d13fbccd55252c3b3e8e0a775a355f6b30933fcff6885a2765577ad86da13067e184f8727e5a8b53e288b4c9d577