sec.yr-fr-rec1.easy-ext.yves-rocher.com

- LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 06:2e:c7:4b:a5:fe:84:90:11:f4:26:dc:de:0a:dc:c4 was issued on by GeoTrust Inc..

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER

Organization: LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER
Organization unit: LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER
State / Province: Morbihan
Locality: La Gacilly
Country: FR

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:2e:c7:4b:a5:fe:84:90:11:f4:26:dc:de:0a:dc:c4
Serial Number (int): 8218255823198132349279569491958357188
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): b4:d2:8d:e6:d1:73:33:5f:8c:4d:0a:0c:c5:53:1a:61:f3:4f:5e:d1
Fingerprint (sha256): 14:09:fd:3c:da:42:2f:db:8f:ce:d5:ff:6a:9f:4b:2a:0d:89:b0:6e:34:e4:56:72:65:2b:c9:5b:a5:7d:a1:2c

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate sec.yr-fr-rec1.easy-ext.yves-rocher.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sec.yr-fr-rec1.easy-ext.yves-rocher.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sec.yr-at-rec1.easy-ext.yves-rocher.co
sec.yr-fr-rec3.easy-ext.yves-rocher.com
sec.yr-ru-rec3.easy-ext.yves-rocher.com
sec.yr-ro-rec1.easy-ext.yves-rocher.com
sec.yr-nl-rec2.easy-ext.yves-rocher.com
sec.yr-dk-rec4.easy-ext.yves-rocher.com
sec.yr-us-rec1.easy-ext.yves-rocher.com
sec.yr-ca-rec2.easy-ext.yves-rocher.com
sec.yr-at-rec2.easy-ext.yves-rocher.com
admin-rec1.easy-ext.yves-rocher.com
sec.yr-se-rec4.easy-ext.yves-rocher.com
sec.yr-fr-rec4.easy-ext.yves-rocher.com
sec.yr-us-rec2.easy-ext.yves-rocher.com
sec.yr-kz-rec1.easy-ext.yves-rocher.com
sec.yr-be-rec3.easy-ext.yves-rocher.com
sec.yr-kz-rec2.easy-ext.yves-rocher.com
sec.yr-de-rec2.easy-ext.yves-rocher.com
sec.yr-ua-rec1.easy-ext.yves-rocher.com
sec.yr-dk-rec3.easy-ext.yves-rocher.com
sec.yr-nl-rec1.easy-ext.yves-rocher.com
sec.yr-se-rec1.easy-ext.yves-rocher.com
cockpit-rec1.easy-ext.yves-rocher.com
sec.yr-dk-rec2.easy-ext.yves-rocher.com
sec.yr-ru-rec1.easy-ext.yves-rocher.com
api-rec3-ru.easy-ext.yves-rocher.com
sec.yr-fi-rec4.easy-ext.yves-rocher.com
admin-rec4.easy-ext.yves-rocher.com
sec.yr-kz-rec4.easy-ext.yves-rocher.com
sec.yr-ch-rec3.easy-ext.yves-rocher.com
sec.yr-be-rec2.easy-ext.yves-rocher.com
sec.yr-ru-rec2.easy-ext.yves-rocher.com
sec.yr-nl-rec3.easy-ext.yves-rocher.com
sec.yr-ch-rec2.easy-ext.yves-rocher.com
sec.yr-fi-rec2.easy-ext.yves-rocher.com
sec.yr-no-rec3.easy-ext.yves-rocher.com
fileshare-rec1.easy-ext.yves-rocher.com
sec.yr-es-rec1.easy-ext.yves-rocher.com
sec.yr-es-rec4.easy-ext.yves-rocher.com
sec.yr-fr-rec2.easy-ext.yves-rocher.com
admin-rec3.easy-ext.yves-rocher.com
sec.yr-no-rec1.easy-ext.yves-rocher.com
fileshare-rec1-ru.easy-ext.yves-rocher.com
cockpit-rec3-ru.easy-ext.yves-rocher.com
fileshare-rec3-ru.easy.yves-rocher.com
sec.yr-kz-rec3.easy-ext.yves-rocher.com
admin-rec3-ru.easy-ext.yves-rocher.com
sec.yr-us-rec3.easy-ext.yves-rocher.com
cockpit-rec2-ru.easy-ext.yves-rocher.com
cockpit-rec4.easy-ext.yves-rocher.com
sec.yr-uk-rec4.easy-ext.yves-rocher.com
api-rec1.easy-ext.yves-rocher.com
sec.yr-ru-rec4.easy-ext.yves-rocher.com
fileshare-rec3.easy-ext.yves-rocher.com
sec.yr-es-rec2.easy-ext.yves-rocher.com
cockpit-rec4-ru.easy-ext.yves-rocher.com
admin-rec1-ru.easy-ext.yves-rocher.com
sec.yr-ch-rec4.easy-ext.yves-rocher.com
sec.yr-ch-rec1.easy-ext.yves-rocher.com
sec.yr-ca-rec4.easy-ext.yves-rocher.com
sec.yr-uk-rec3.easy-ext.yves-rocher.com
sec.yr-de-rec1.easy-ext.yves-rocher.com
sec.yr-uk-rec2.easy-ext.yves-rocher.com
sec.yr-at-rec4.easy-ext.yves-rocher.com
cockpit-rec3.easy-ext.yves-rocher.com
api-rec1-ru.easy-ext.yves-rocher.com
sec.yr-de-rec4.easy-ext.yves-rocher.com
api-rec3.easy-ext.yves-rocher.com
admin-rec2-ru.easy-ext.yves-rocher.com
sec.yr-ua-rec4.easy-ext.yves-rocher.com
sec.yr-us-rec4.easy-ext.yves-rocher.com
sec.yr-nl-rec4.easy-ext.yves-rocher.com
sec.yr-fi-rec3.easy-ext.yves-rocher.com
sec.yr-ro-rec3.easy-ext.yves-rocher.com
fileshare-rec2.easy-ext.yves-rocher.com
sec.yr-no-rec2.easy-ext.yves-rocher.com
sec.yr-fi-rec1.easy-ext.yves-rocher.com
admin-rec4-ru.easy-ext.yves-rocher.com
sec.yr-no-rec4.easy-ext.yves-rocher.com
sec.yr-se-rec2.easy-ext.yves-rocher.com
cockpit-rec2.easy.yves-rocher.com
api-rec2.easy-ext.yves-rocher.com
fileshare-rec2-ru.easy-ext.yves-rocher.com
sec.yr-be-rec1.easy-ext.yves-rocher.com
sec.yr-at-rec3.easy-ext.yves-rocher.com
sec.yr-ro-rec4.easy-ext.yves-rocher.com
sec.yr-ro-rec2.easy-ext.yves-rocher.com
sec.yr-uk-rec1.easy-ext.yves-rocher.com
admin-rec2.easy-ext.yves-rocher.com
sec.yr-dk-rec1.easy-ext.yves-rocher.com
sec.yr-be-rec4.easy-ext.yves-rocher.com
cockpit-rec1-ru.easy-ext.yves-rocher.com
api-rec2-ru.easy-ext.yves-rocher.com
sec.yr-ua-rec3.easy-ext.yves-rocher.com
sec.yr-ca-rec3.easy-ext.yves-rocher.com
sec.yr-ca-rec1.easy-ext.yves-rocher.com
sec.yr-ua-rec2.easy-ext.yves-rocher.com
sec.yr-es-rec3.easy-ext.yves-rocher.com
sec.yr-se-rec3.easy-ext.yves-rocher.com
sec.yr-de-rec3.easy-ext.yves-rocher.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com

Other certificates including the domain name yves-rocher.com

(limited to 100 certificates)
services.yves-rocher.com
medianet.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
abspace-re7.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
www.yves-rocher.fr
www.yves-rocher.com
eimv3-statics.yves-rocher.com
www.yves-rocher.com
birdplan.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
admin-rec.easy-ext.yves-rocher.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
*.yves-rocher.com
www.yves-rocher.fr
www.yves-rocher.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
imperva.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
secure-vpci.yves-rocher.com
secure-vpci.yves-rocher.com
incapsula.com
dyrectperso.yves-rocher.com
incapsula.com
specif-ac.yves-rocher.com
www-npe.yves-rocher.com
incapsula.com
incapsula.com
incapsula.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
www-npe.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
secure-vpci.yves-rocher.com
myreport.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
imperva.com
san-16-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
*.statics-easy-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-16-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
dyrectperso.yves-rocher.com
pim.yves-rocher.com
dyrectperso.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
medianet.yves-rocher.com
admin-rec.easy-ext.yves-rocher.com
*.yves-rocher.com
ftp-pao.yves-rocher.com
*.yves-rocher.com
services.yves-rocher.com
incapsula.com
samy.yves-rocher.com
newsroom.yves-rocher.com
www.yves-rocher.fr
dyrectperso.yves-rocher.com
services.yves-rocher.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
dyrectperso.yves-rocher.com
newsroom.yves-rocher.com
www-npe.yves-rocher.com
dkb.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
specif-ac.yves-rocher.com
*.yves-rocher.com
flow.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
portailmag-rec.yves-rocher.com
*.dev-spark-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for sec.yr-fr-rec1.easy-ext.yves-rocher.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP3P3EPEZUOfLOLec97Q
PZzYYRMiPRGilFlCnBfpF957R1BsHIu/fudgPvqWmglN2VcWL0/XPv28QajyrJFo
ADj2C3VZYyf9ouVAwDJGbTr0optDZIh1n/o/FaK8nSbZs0weaeTAKDUZARO9Aeej
R27mBCiNkcArUaNm2HLgjlC9tbESr7sBveEJcV++0+dG+a65x9AlBouN7oFEL+53
l9MWhAv0mlrXFXkrBn6Zg7+iBqmNlcTQBQ6cNK5h8I5SMtLS17+WT3MxNT9PjJ+w
vqmTLb8oY/rT+pJhbCZrv3RQ9it/Gf65gSObMJwkaQVbOL0/uKUX/5DVn8jRElOM
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8218255823198132349279569491958357188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'La Gacilly'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'sec.yr-fr-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24867867112973788053620307430235585535817921748687038907761411341856289657714099328202313139527750926782341098080599314407030612806205914869410375197750754439194852926420577662325366273984818342431134767947132639382206289087861028181631022949240711855303980003590497804383449155490045314842358635082893303181505905334918226569575387239288286511043356528781095174302581420257388171995806433944615202573565366576885091582464040420007662177455841556939528374648175861910270692882591907397664404342823257079269284901575759147109043236842742935161642859740966825040602158225623270287414645464345826951627282061892347202603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4053 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-at-rec1.easy-ext.yves-rocher.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-fr-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ru-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ro-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-nl-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-dk-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-us-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ca-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-at-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-se-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-fr-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-us-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-kz-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-be-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-kz-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-de-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ua-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-dk-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-nl-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-se-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-dk-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ru-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-rec3-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-fi-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-kz-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ch-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-be-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ru-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-nl-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ch-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-fi-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-no-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileshare-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-es-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-es-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-fr-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-no-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileshare-rec1-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit-rec3-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileshare-rec3-ru.easy.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-kz-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-rec3-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-us-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit-rec2-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-uk-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ru-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileshare-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-es-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit-rec4-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-rec1-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ch-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ch-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ca-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-uk-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-de-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-uk-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-at-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-rec1-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-de-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-rec2-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ua-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-us-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-nl-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-fi-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ro-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileshare-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-no-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-fi-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-rec4-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-no-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-se-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit-rec2.easy.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileshare-rec2-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-be-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-at-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ro-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ro-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-uk-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-dk-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-be-rec4.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit-rec1-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-rec2-ru.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ua-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ca-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ca-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-ua-rec2.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-es-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-se-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-de-rec3.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.yr-fr-rec1.easy-ext.yves-rocher.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00da679b5735c44544ce295ff35e61b6d9d9671bafd5184f748a0766b7c5221fb794bc2d4b84c5862b4a3d000094a5e4879488a99ad8f1e2501355cf782f86cd428fa9837465f0956b1b3127902f583b4ddadc14902b08f786db2e4ba01108d9c9589cb49825a306035d46674ccf49ecf96cf75d3396149b1733a17b7d380b8e58f13e2b060c92af2f4f08b7aad70aaecd3bc80f1008c8dd62403087d5012b2c1fdfa6fd31b92394621f5d2205b68ec6b15b74a54910de11bb7f634a7f16706e7706e5e30f9e32f454594b6a13872a9ba4f0a90a730fd11417bafe73918461ed3ab7e48061c992a9292065778bf6bf1e4034c4e6fe65bfa8a0853be3428e9da4b5