mszweb.mandant.dwd.de

- Deutscher Wetterdienst -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number fd:41:4c:90:cc:e7:1e:c3:0c:12:93:34:79:5f:20:ac was issued on by GEANT Vereniging.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
State / Province: Hessen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): fd:41:4c:90:cc:e7:1e:c3:0c:12:93:34:79:5f:20:ac
Serial Number (int): 336633735164788108358399375327304294572
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 91:9a:d2:7d:22:80:e0:53:70:19:b5:6a:e4:1b:91:8b:1c:7e:d9:4d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 6a:db:d1:1e:88:d3:68:e5:fc:60:52:14:2a:a6:65:69:c0:43:6e:08
Fingerprint (sha256): 14:f8:6a:c8:d4:30:72:85:45:02:01:46:80:75:7a:11:ef:ef:68:9b:da:7c:3f:fe:a8:58:e9:1e:73:03:a0:f7

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate mszweb.mandant.dwd.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mszweb.mandant.dwd.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mszweb.mandant.dwd.de
msz-cuxhaven.de
www.kuestenwache.de
www.msz-cuxhaven.com
www.msz-cuxhaven.de
www.msz-cuxhaven.info
www.msz-cuxhaven.org
www.xn--kstenwache-9db.de

Other certificates including the domain name dwd.de

(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de

Certificate

The complete raw certificate details for mszweb.mandant.dwd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336633735164788108358399375327304294572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mszweb.mandant.dwd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4249072833884786656892048008149469662973219137856237366636571431683449731427649843019239315078247895696780669100388987761118571082994276793217313895993140373934754348011505916737467411373846127680381730555421954977464862557260899184387862074571847277828814778464052733481831277073244667108653841672054842511964934797959745247193127188197501434727364011498811828303350239777072747905269433203900191154191205690195436619194884763962469338186218423640971755529918432591105880216212189998008899144273565031480988600592876847699884053053340178103867441346665824219236702693550921209202981788583416079867192431034704195076119288592817669251015999622929800740773015079988781086082162477293713163149829821823607093865094840636063200272500312534681498666422755471242931289949750269263069001479730050284142903500523289919250035696855707549832840698027578675324504012483340505730334729992318980486490948026541212195225403573769305043423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							919ad27d2280e0537019b56ae41b918b1c7ed94d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							016b007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001843d1fde6a0000040300483046022100e4abe1f5e60eb05ba0ba75554c0f807baf0eff7fe991239fdc7c1ed59cd64259022100d9d235470eeb6ab620d54afee945c122ce73bf2a3b9868e9f79d42b61771e57e0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001843d1fde3600000403004830460221008bba125f85cd97318025d98c2364af13389ecd8797edcb86ccbcbd23a671f5a3022100e1508ea5196bbee508b3c10d9162d632068fce94eee593e0c0a91fff27552c54007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001843d1fde070000040300483046022100d5f4fcd520cf8baf67e7c8f094ca197e285505bf24ca4cd1f18b97c043333825022100974896ea7316b716d4262865aca3a204c9098a6a7b89a15d79139f8f361212d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mszweb.mandant.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msz-cuxhaven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuestenwache.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--kstenwache-9db.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a067f5e361070217d85f7aeaa0771422b1befa3e682d3d3262b9fa7f6831ebda2f385576882c3936ca1ec91b02caf1994331736b7c84c5f383de93a06da896fdcf6ded9e97fa4571d5002a2afa4070e02a16445e1f79ecf9cfd4abfd9c447443527e9158b2dc86956e362a30a891c054d490e8f26ff7e5e030c57bb312ee1cf142a283fdd613aebb95786162bda76c53901d0c522452970095738ea0e49aed05e6999a4a6b7cdec3b8df29fec81ffdc362969515d1896b2528aa990551baa2ab46020e989f00838263c905e6866aa30f510980a876c5e0ae096219f1f60a3311b7dda8e7cb81d9036bfefd15850d470b3fb887a68387bd959024bcca0938a4dfbd4bae2141b49d71fee0db83c1bf64d8e873ad55fe21b9db4d6786c0800c6c4757fddfdbf79c542ecc973a7ec988c4f6438784df248ff3806fb8aff6a29a3f71509fce270dde002904bfa6a1902195e70da99d634513ac806b2642c440f47dc831e95d739713483d0441698fc16c9f49b67df93f45e6d32a58081678c3b5d00ebe23fc5426b1dd99be677b9bbcd3b80da85f2ff9455ab0fdbef8bb7e371ebfdae0b7ffab393c4dfcd8a7bafcf550985d6470c3278273e0ca41ec1a53b2e360afe2db5a9acd44beaeea0664f35269208cf3cc314b6fcd2a2b0eb0cd0771962945eb30fef63f2bafd5bc67c623c972ef1f0f0ad1a3d211ddfa38cb6979f56b03f5