iad12.cs.uit.no

- Universitetet i Tromsø - Norges arktiske universitet -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 03:da:0c:33:1f:df:6d:35:2b:16:00:74:d1:7c:a4:6c was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitetet i Tromsø - Norges arktiske universitet

Organization: Universitetet i Tromsø - Norges arktiske universitet
Organization unit: Institutt for Informatikk
State / Province: Tromsø
Locality: Tromsø
Country: NO

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:0c:33:1f:df:6d:35:2b:16:00:74:d1:7c:a4:6c
Serial Number (int): 5119852141931013570221871647579481196
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 33:70:00:e8:7d:dd:1d:a4:b7:42:97:2e:76:8d:cc:cb:34:3c:92:93
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): ca:1b:7c:de:a5:57:f4:d5:d9:f2:5e:bf:03:0e:e2:22:32:3a:65:80
Fingerprint (sha256): 13:0a:f9:09:28:94:ab:8d:9f:58:6f:5a:b1:f7:0a:59:6a:04:0b:94:25:09:1c:67:fc:8b:65:22:66:3d:d4:95

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate iad12.cs.uit.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iad12.cs.uit.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iad12.cs.uit.no
sigops.cs.uit.no

Other certificates including the domain name uit.no

(limited to 100 certificates)
mmp.sfb.uit.no
udoc.uit.no
fook.nuv.uit.no
dynserv.eiscat.uit.no
ansatte.uit.no
webarkiv.uit.no
james.ub.uit.no
list.uit.no
heimdal.uit.no
arkivmunin.uit.no
alta-mp.uit.no
digitalmappe.uit.no
uhskypepool02.uhad.no
combineo.cs.uit.no
storefront.uit.no
tdmwiki.uit.no
lync2013pool.uit.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
inf2900v19.cs.uit.no
netscalermgmt.cc.uit.no
trfl.uit.no
post.ifi.uit.no
uhskypepool01.uhad.no
startiot.cs.uit.no
mmp.sfb.uit.no
kakeboksen.td.org.uit.no
gtdict.uit.no
dynserv.eiscat.uit.no
olyvia.uit.no
udoc.uit.no
dynserv.eiscat.uit.no
aurora.uit.no
cage.uit.no
dua.uit.no
cag.uit.no
avtalekatalogen.uit.no
uhskypepool02.uhad.no
feidehotell-test.uit.no
ise.uit.no
keycard-api.uit.no
nsm-ts.duppedingser.uit.no
nav.uit.no
arctos.uit.no
manntall.uit.no
mmp.sfb.uit.no
gtweb.uit.no
harstad-mp.uit.no
avtalekatalogen.uit.no
sql-report.ad.uit.no
priweb.uit.no
sbmlmod.uit.no
uhskypepool01.uhad.no
fr.uit.no
alta-mp.uit.no
uitbeta.uit.no
immunology.uit.no
arctos.uit.no
uit.no
Russisk.uit.no
utstyr-iis.uit.no
radius2.uit.no
parkering.uit.no
cirfa.uit.no
EX20.ad.uit.no
blyant.uit.no
scom.uit.no
nikt2019.uit.no
fook.nuv.uit.no
spaceweather.uit.no
vch1.cc.uit.no
wolf.uit.no
todos.uit.no
feidehotell-test.uit.no
mmp.sfb.uit.no
td.org.uit.no
manntall.uit.no
highnorth.uit.no
mail.uit.no
uhskypepool01.uhad.no
wac.uit.no
thnetii.td.org.uit.no
munki.uit.no
foto.uit.no
uhskypepool02.uhad.no
munkiwa.uit.no
nikt2019.uit.no
uhskypepool01.uhad.no
rhd.uit.no
gtsvn.uit.no
webmail.wpuitstaging.itpartner.no
cage.uit.no
w3w.uit.no
iad12.cs.uit.no
systemx.uit.no
thnetii.td.org.uit.no
orakel.uit.no
static.uit.no
spips.uit.no
kakeboksen.td.org.uit.no

Certificate

The complete raw certificate details for iad12.cs.uit.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+bUSWt/aySXoDdf253y
nU7QXMNMfnl8JVq2AZbhB1ddjsxVqglFNI/YRPW/oW41xh+FFPgg7iK63rjttXoA
cHvQL1Ssx7DdeDnUQKOhmXmp0UwfEZ5iDB36k7k8FtlFRXYvE1h4dhEwVZuEr1yx
C1tPQr3q1vBdPjiGd8+MRzHPCuCApFsmeku7pUulRTB1gVApk7N+NUSd3aMqj1cL
TPmyWwokcIe/FBwKPfSGseXFSuVuG59mEV/msy5MsC+aIZ7qSW6GYZNWcKS+r4A0
N4gZ6q5HPtkCtDS6YV7tt0cj+niNcSXxU6vMI7z/3NEGPTK/vasx9MY8IljXFJ20
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5119852141931013570221871647579481196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tromsø'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tromsø'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitetet i Tromsø - Norges arktiske universitet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Institutt for Informatikk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iad12.cs.uit.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24730295611596806183159990170002989690967874018184575104094807081882418592678388354285878047627776098849050938172660717316274321787763149101042225434482654559614099708123435263585798798755278675096282483986608451080567464592099536188786678976577489920311541959783371029425134566738804390608749889205483034420386914762269660006492573924821196188805617421597082671943837922083653185636253336016937347995558181752558440030204294039466176741200784402006715244252603384344505435512145791656348037222705152531035682063634942060911977243285722726617547763179540906361748732342534432360893160413122733862884481246136163480621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							337000e87ddd1da4b742972e768dcccb343c9293
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iad12.cs.uit.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigops.cs.uit.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048eecefda09eccee59ee9af698d51b6174c30370833438f2dd2de8b538c54be668a69d64d0c6e2a067bc1c0a5e1f6440a75cf3dc34103e035685c13c860a9c9983ce15ec7ed69b62a8c2ba6800640f772d1c47f5ac65d5979d0d4cd9562198e1c357cba05b46e6144abc9a945294626bfba760068d933f8c6fc01dc874867e94006fd840d57b064c52b390d0ead622cda5e6859ead1a11d5b663fd38da3d60bb2326b700564d4e9898355d43f4c364dab70e0155d856a473870d1d642faf0bfa4cc263795b35c04453375901865d43bd38d56e0002936fb68b9dff34058c6eff615e2912cf82cc1033f718ae5e1dbb5e389f62c176c7c910a1c1aaaab5e4d435