cms.online.berklee.edu

- Berklee College of Music, Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:1b:4c:76:2b:7f:b8:70:93:86:22:bf:2e:2f:71:1e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Berklee College of Music, Inc.

Organization: Berklee College of Music, Inc.
State / Province: Massachusetts
Locality: Boston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:1b:4c:76:2b:7f:b8:70:93:86:22:bf:2e:2f:71:1e
Serial Number (int): 16092478790114745024467366459042918686
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2e:67:27:26:7f:b6:80:72:d2:f4:fe:8c:d5:b9:ea:54:12:4b:56:1a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 2a:cc:78:7e:9b:fb:9e:fc:74:a6:06:1a:b4:70:f2:fe:90:89:e3:4b
Fingerprint (sha256): 15:b5:b0:e3:d0:50:a4:06:ad:b4:01:8c:5b:2d:d8:cf:e7:83:0d:d7:81:3b:a1:fc:2c:ec:4b:9c:f9:35:b9:3e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate cms.online.berklee.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cms.online.berklee.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms.online.berklee.edu

Other certificates including the domain name berklee.edu

(limited to 100 certificates)
informer.berklee.edu
5674069752020992-fe1.pantheonsite.io
ucdc.edu
amploadvance.com
ask.library.berklee.edu
test.eis.uw.edu
ol.berklee.edu
guides.library.berklee.edu
development.moodlerooms.com
development.moodlerooms.com
acquia-sites.com
remix.berklee.edu
archives.berklee.edu
apsprd108.berklee.edu
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
remote-vpn.berklee.edu
n002.offcampuspartners.com
san-14-s12.tlsprovisioning.exacttarget.com
n002.offcampuspartners.com
development.moodlerooms.com
acquia-sites.com
development.moodlerooms.com
n002.offcampuspartners.com
library-stage.berklee.edu
ol.berklee.edu
5674069752020992-fe1.pantheonsite.io
hub.berklee.edu
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
offcampushousing.fau.edu
5674069752020992-fe1.pantheonsite.io
amploadvance.com
givingday.berklee.edu
apsprd014.berklee.edu
admissions.berklee.edu
welcome.online.berklee.edu
demo.canvas.online.berklee.edu
fts.berklee.edu
lrmedia.berklee.edu
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
centralnicstatus.com
san-14-s12.tlsprovisioning.exacttarget.com
ask.library.berklee.edu
5674069752020992-fe1.pantheonsite.io
208.lsnc.net
n002.offcampuspartners.com
n002.offcampuspartners.com
development.moodlerooms.com
development.moodlerooms.com
development.moodlerooms.com
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
acquia-sites.com
development.moodlerooms.com
n002.offcampuspartners.com
5674069752020992-fe1.pantheonsite.io
online.berklee.edu
acquia-sites.com
developer.blackboardopenlms.com
bos-isepan1.berklee.edu
scsc-casper.berklee.edu
offcampushousing.fau.edu
*.genesis.k8s.online.berklee.edu
remote-vpn.berklee.edu
development.moodlerooms.com
ask.library.berklee.edu
online.berklee.edu
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
acquia-sites.com
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
5674069752020992-fe1.pantheonsite.io
online.berklee.edu
opcpostback.berklee.edu
5674069752020992-fe1.pantheonsite.io
amploadvance.com
5674069752020992-fe1.pantheonsite.io
developer.blackboardopenlms.com
learningcenter-stage.berklee.edu
wbstst004.berklee.edu
learningcenter.berklee.edu
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
*.online.berklee.edu
5674069752020992-fe1.pantheonsite.io
cms.online.berklee.edu
offcampushousing.fau.edu
5674069752020992-fe1.pantheonsite.io
5674069752020992-fe1.pantheonsite.io
demo.canvas.online.berklee.edu
guides.library.berklee.edu
development.moodlerooms.com
development.moodlerooms.com

Certificate

The complete raw certificate details for cms.online.berklee.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgaYtkQf0lAMjABjXwwp
4/PoCRXQOo/+NUUlVD/1cANyFcdgRNgbCavm671QuIZDu2UOhgPek37N7QRtB75F
VnAYNZmTxq5fYHUZSUQYE+SVBjo3Vf/c188dIMa7OMTvwUwvbfQeqTwSC+TcCbim
5LOenEA7E9wsXGVh1hoZdtilwAgqGPhL0azVEofOqH/YPemtm3MLGpcQraVCReq5
qDJGdeeC8etIgs8nhw9EaiNOt6soXptZ5W4t45jimR8AaJoGtBHE08fsWgZFfa9I
q+XOzp1OLPQUc4cFZtBAH4ivVS3JzV6M7eGinuSYng0yGhnAulA1Ls4Baw56B8YF
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16092478790114745024467366459042918686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berklee College of Music, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cms.online.berklee.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22473671154709650137524002684455639433099946007424672972457127612999867106377330424078104767879623912205694461249332896367767495231952593838997342025000733314343215779535970050304549836792984686768807113284504162134344172129306288082294755288215878345537085016141065036714240666421263010469050050028704835131977376939774699681216695563723452747369687057450483737087721757537117798305583819700356262737504529362418115484642709688122386970805177735474675190400135233035131445765513603473748016227886447723319232275629301120759195319502063752031386692913660590459401108656146901507629233815212752135316972384144295593263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e6727267fb68072d2f4fe8cd5b9ea54124b561a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.online.berklee.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016c91e538820000040300483046022100f64436649a41a60f03c93c01d7caccff57573dfae53e8c32a99b724814446555022100d3091feef732a7132cab480e6aff59a558d0920ceb41590d9875922a871dea2a0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c91e539190000040300463044022041ef2cd550002bac9410dccf790ae83f1ec8b67bc41d858c1d85f0cbf52c8568022030851f806dd4fa81d0b6e7db6394cf75a6150f54a9a6299b9f3f44cd29aea2ed0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016c91e53826000004030046304402200e24253f899b1d59c0e85a8453321675ff92e851a512fb97a157aed03af407d302204f52f5d5840701da3267e1d05eba6cf65cd531820ddbecaaf79ee70582c5a762
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0085a9f8f480b00306ef3a04e1f18b005272eb56af06602c569aa2297b72bdd28b2011124d8038f23c6c431ff4cf455e2eaa1fe6d09fb744b711dcd586014f5d14567fc41bbe66e4f9aabab20bb5703794fb2ce8b8fe97933638581fd6a2fb9b3f61ffec90059f49d71e2284f15801fe52b413972715c5f9fa7e0625218d91f40a2a78a08a9df839c4ad8634d8b6c1db58eb47a1235ffc04d92f92aa5fb34e47c220ff59b2b179ada4b9d1cb05ad9b61dc9797b3f8578b0ae83f108f080dd82c8fb0995a4e3f82659c27d65eccb505bccdbdf20f785c2ab06b3ff94436061d1a2c7b5a1a0af01854f53d1f517e9ae2dff4e0de4e34989925d2129b5b12b3d92b7c