app.vgz.nl

- VGZ Zorgverzekeraar N.V. -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 1d:de:d9:ff:95:32:ef:20:e7:bf:72:64:a1:28:1a:58:0d:3b:57:2f was issued on by QuoVadis Limited.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VGZ Zorgverzekeraar N.V.

Organization: VGZ Zorgverzekeraar N.V.
State / Province: Gelderland
Locality: Arnhem
Country: NL

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 1d:de:d9:ff:95:32:ef:20:e7:bf:72:64:a1:28:1a:58:0d:3b:57:2f
Serial Number (int): 170530488124335337670810764415513340110958188335
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 3a:04:ab:d4:7d:75:e6:74:10:07:d5:7e:9c:f3:c5:c8:38:0f:11:19
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): aa:e0:02:22:3c:64:49:5a:b3:a8:5a:0b:42:ce:79:20:c7:96:5f:99
Fingerprint (sha256): 14:27:2f:77:80:7e:51:03:85:a5:ef:1e:9a:b5:b6:98:ff:d0:c4:8b:3d:3d:0f:8b:38:17:21:6a:79:86:1c:0c

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate app.vgz.nl

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.vgz.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.vgz.nl
app.vgzbewuzt.nl
ucapp.vgz.nl
app.iza.nl
app.izzdoorvgz.nl
app.umczorgverzekering.nl
app.zorgzaam.nl

Other certificates including the domain name vgz.nl

(limited to 100 certificates)
feedback.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl

Certificate

The complete raw certificate details for app.vgz.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArccUamrz1Ruagm3Dt0ba
Khr3Ac5FSKKyfAZdMU7AOSLNG0LAWzyHx1ilMdoImnlPX4Agqm163lhEoF7blzRX
sctFwl0PUBoSWA9zgYmfOsIw+pQ/+bMVoU9F0W89jtDoA/bG+tmCXL4CeCHWoR7T
wDBctnstno7voKbBWNryQRjUnzoyGi+rElF/GwRxBjnTb0DkpgJCh8RA9CfLCrvd
6mTWNnWOhiwUO98kp8PqLX0TKQQWCIpWSj9TcLTQb+iDucChjHbXiJ8ygzySVjOG
WGKAmJR85NSya/1L3AG9xvn4TGGnmLEI9YMbwq+Rr2izidfOSBH/M1BttMuihWJQ
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 170530488124335337670810764415513340110958188335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-15 09:38:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 09:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arnhem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VGZ Zorgverzekeraar N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'app.vgz.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21937396642106273986528578967134449201605774826872516262584896232332684749184116999531868612429240088679771680008586241439714205238896357935611000277642484747846999476199760124669085251822171110138334924580649303050800473889521324908512666450972516419959930689089428048887582566375519301733409024043497143007462981689786866152006663953895349383550169613289961322653042966261755561388083556722950826930544642967374703360927252577990687815687222431390105747253591672568326969498914117937947824927323773765299250517509600998866645481323964590186453333498220624382922158136323229588655717878227592614425229585647765967021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vgzbewuzt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucapp.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.iza.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.izzdoorvgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.umczorgverzekering.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.zorgzaam.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a04abd47d75e6741007d57e9cf3c5c8380f1119
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d3aa26c6097188c3d8a6ac1413cd4c82ff8da9adcd67d6808a48a501a19c6b17a8a98720b7c8abb9cbca84b84ce8a4190cf24d966f4e298fcd55757487c7e37188ed14f42718904aff2f1fa8cf874438d8958a22c11ce830c11bcd23c5d07306493eb6b14afff4abc494afe11d22525064746208db89e47f3f209ac0e3be664b49cf6349d800b2c3ee524278e29dc96f02f5a961bedffee8f044926bfdaaf58573f9cd1cc208d6a647940cd6850ea5c9f1fbe3e9f5d59591505a04c383600e69f9290f6dd79ff7b893bcf27ea47aa1798f4ebcaee252f72b73e0fbacecd1db65bab9a415aecd3c1f55873ba3d8ca47c2828abb2de6700a6e86fdfa05d66320ec