*.msft5-us2.tatacommunications.com

- Tata Communications Limited -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0f:46:53:58:2b:ea:62:e7:06:76:c5:14:00:b7:fe:59 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tata Communications Limited

Organization: Tata Communications Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:46:53:58:2b:ea:62:e7:06:76:c5:14:00:b7:fe:59
Serial Number (int): 20303571142537791489147776236340641369
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2c:9c:3c:90:53:7c:02:6a:53:53:40:24:73:24:ac:35:90:0e:d4:2f
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): dd:08:d0:65:84:e9:4c:82:68:01:4c:3c:0b:5e:f8:2c:e0:51:8f:21
Fingerprint (sha256): 16:7e:50:ca:f8:b1:6e:9a:56:0b:79:30:74:74:8e:52:29:63:c1:f6:8c:30:d6:03:39:38:e9:1a:66:66:25:ee

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.msft5-us2.tatacommunications.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.msft5-us2.tatacommunications.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.msft5-us2.tatacommunications.com
msft5-us2.tatacommunications.com

Other certificates including the domain name tatacommunications.com

(limited to 100 certificates)
in-pun.vpn.tatacommunications.com
reports.move.tatacommunications.com
indiakyc.move.tatacommunications.com
uk.vpn.tatacommunications.com
eptw.tatacommunications.com
*.globalpartnerportal.com
mobility.tatacommunications.com
cardiolog.tatacommunications.com
test-network.iot.tatacommunications.com
gleexpecls.instacccloud.tatacommunications.com
videoconferencing.tatacommunications.com
in-pun.vpn.tatacommunications.com
xfer.tatacommunications.com
mt-edge-b.3scale.net
in-access.tatacommunications.com
mt-edge-b.3scale.net
ekyc.devkyc.move.tatacommunications.com
us-access.tatacommunications.com
support1.chit.biz
smartdevices.iot.tatacommunications.com
care.koinx.com
portal3.mss.tatacommunications.com
developer.tatacommunications.com
*.tatacommunications.com
jobs.tatacommunications.com
ekyc.prod.in.tmpkyc.move.tatacommunications.com
ekyc.devkyc.move.tatacommunications.com
extranet-vno.tatacommunications.com
demo.analytics.iot.tatacommunications.com
campaign.tatacommunications.com
test-data.iot.tatacommunications.com
extranet-vno.tatacommunications.com
portaltest.tatacommunications.com
helpcenter.keysuggest.io
test-platform.iot.tatacommunications.com
sfilex.tatacommunications.com
healthandsafety.tatacommunications.com
mt-edge-b.3scale.net
*.tatacommunications.com
portal.tatacommunications.com
idp.tatacommunications.com
helpdesk.mytravaly.com
kiacart.triblem.com
www.peakinfra.ethicshelpline.in
www.tatacommunications.com
mt-edge-b.3scale.net
support.xcellhost.cloud
enetcare.tatacommunications.com
primerep.tatacommunications.com
cti1.instaccglobal.tatacommunications.com
support.subcom.tech
in-pun.vpn.tatacommunications.com
customerzone.tatacommunications.com
actsync-na.tatacommunications.com
safety.tatacommunications.com
support.inxeption.com
filexch.tatacommunications.com
hranalytics.tatacommunications.com
smesupport.iifl.com
indiakyc.devkyc.move.tatacommunications.com
portalna.tatacommunications.com
primerep.tatacommunications.com
cardiolog.tatacommunications.com
ekyc.move.tatacommunications.com
test-data.iot.tatacommunications.com
support.agtpl.in
www.tatacare.tatacommunications.com
itassist.aggregateintelligence.com
*.mss.tatacommunications.com
in.mum.vpn.tatacommunications.com
ekyc.uatkyc.move.tatacommunications.com
oneplacebeta.tatacommunications.com
tatacommunications.com
filexch.tatacommunications.com
documentation.mrnobody.in
www.peakinfra.ethicshelpline.in
in-mum.vpn.tatacommunications.com
mobility.tatacommunications.com
us.vpn.tatacommunications.com
in-chn.vpn.tatacommunications.com
move.tatacommunications.com
lmt.tatacommunications.com
*.msft5-eu2.tatacommunications.com
workersafety.uat2.iot.tatacommunications.com
comms-apac.tatacommunications.com
*.tatacommunications.com
*.globalpartnerportal.com
ethernetportal.tatacommunications.com
agrud-support.wetranscloud.in
business-support.truecaller.com
*.msft5-us2.tatacommunications.com
netpms.tatacommunications.com
voiceservices.tatacommunications.com
uat-ekyc.move.tatacommunications.com
support.minits.in
support.freedomcard.io
tatacommunications.com
iot.tatacommunications.com
support.ignitecinc.com
*.ipstorage.tatacommunications.com

Certificate

The complete raw certificate details for *.msft5-us2.tatacommunications.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J9J1WfFSTRo+G/Ev455
FU6Jm4zWWc9pghddlpDHXBCTas5TW7hTAJHSsXrmUd8MErZgKxDN5h4fZ6TdsEAO
VM/QvzTDD5sg8VwdoXTl+jEmpZn+Pmg32nAsfZ2i4FSdNIhqMrJPjgaUz9BeoG17
9fyAtFu2zCIdQF6qsF02S+noaAa+MRiEXfpuPuALR+OgDnjeO556Brqz/+nD9ANP
1O/p03y+835aymf2dhOxgQNROJex6ekuuBUcFqleBCA09r2mT/eWAo9dOiESog1T
UxjuXW4AflmoodOlzPrM5bj/+kBpDYece84uOtROlhdhdwbfpzAxoXeDiK3fduHH
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20303571142537791489147776236340641369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tata Communications Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.msft5-us2.tatacommunications.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26841068696562106224155497731955503109480679911328268234608188736772153830138455921003546123577725021912382908884468374022940481045071757901683846093041406256464128129240336803007318868853322518395564692992351090165074340012767721978738187688398169023159787848223878748692961514395440797364060630748582671360696365683349449023876878319942210481203541987270049221722435280925875229420802977803113774478123995444118641101777939709537931050079526301501036954465363907855263955273320267530246958319444579261200308360077032573946890848471276336555612819452723926416492062945552144581557049981674927528013389710827223893873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c9c3c90537c026a535340247324ac35900ed42f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msft5-us2.tatacommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msft5-us2.tatacommunications.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00660556a0976f2ce483f824ae87b5958ad39b816333cb89d516ddc75b50bcd6961a5a94a2a799649bbe294e8c3ec45d4dde2ea9f3b46a15ec9379398fc0d5fbfd9a627e74cec0719d36dc4acb1e598f2ca34141f5e9dee97708560f1e25b210d9d06ebf58463deda36abbd1d28523d30dfa6f1f8b303851cd8d72118793d537743108ee389daf2057aa77aa07b77692238fb4233a9e589ff349936f1f65df7c804277f9dbbc24a72a4785b8ff2f41d92ec8b16106ef798db4f254c11ad63a01f051e337d98d1f01c32219021346a7e349722c716adb76fcae674ce004e7641c0e6e783920537a558da111c9de5ce167a03dcdd8922144c8ecff4cb20c0d14dd2a