www.mrc.ukri.org

- UK Research and Innovation -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 4d:0a:d8:18:d1:1d:dc:75:65:8d:72:96:66:cd:b2:55 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UK Research and Innovation

Organization: UK Research and Innovation
Organization unit: UKSBS
Locality: Swindon
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:0a:d8:18:d1:1d:dc:75:65:8d:72:96:66:cd:b2:55
Serial Number (int): 102406861610692626580676985971563934293
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8b:15:ba:7a:79:9c:1c:c0:10:d8:0f:55:71:a0:60:9a:65:cf:1f:b4
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): be:49:0a:c4:31:e8:1d:bb:98:10:a7:51:41:4b:24:b6:81:14:c5:5f
Fingerprint (sha256): 17:33:a4:c4:df:2a:a7:3d:62:d7:85:f8:4f:e7:58:4d:71:3b:4b:5b:39:72:37:b6:90:70:cc:d9:05:b2:ce:cb

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.mrc.ukri.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mrc.ukri.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mrc.ukri.org
mrc.ukri.org

Other certificates including the domain name ukri.org

(limited to 100 certificates)
nerc.ukri.org
riinfrastructure.ukri.org.uk
ahrc.ukri.org
webhelpdesk.ukri.org
ahrc.ukri.org
store.apps.ukri.org
www.ukri.org
ithelpdesk.ukri.org
ukinnovationhub.ukri.org
*.api.rap-test.ukritfsdigstaging.services.ukri.org
training.ukri.org
uknqt.ukri.org
webhelpdesk.ukri.org
funding-service.ukri.org
bbsrc.ukri.org
guest.ukri.org
energycatalyst.ukri.org
internal.demo-1.ukristaging.services.ukri.org
ui.demo-1.ukristaging.services.ukri.org
www.innovateuk.ukri.org
ausoriwsvlrpm01.ukri.org
beta.innovateukedge.ukri.org
ukfoodsystems.ukri.org
dev.mhp.ukri.org
re.ukri.org
ausoriwsvlrpm01.ukri.org
epsrc.ukri.org
esrc.ukri.org
ukri.org
*.services.ukri.org
r4ri.ukri.org
*.staging.services.ukri.org
vpn.ukri.org
*.sil.uat.innovateuk.ukri.org
helloworld.default.ukristaging.services.ukri.org
portal.nerc.ac.uk
engagementhub.ukri.org
internal.infradev-1.ukristaging.services.ukri.org
*.apps.org-env-0.org.innovateuk.ukri.org
jenkins29skjdnchg.beta.ukri.org
*.api.dev.ukristaging.services.ukri.org
stfc.ukri.org
ahrc.ukri.org
*.dev.whp.ukri.org
nerc.ukri.org
go.innovateuk.ukri.org
*.services.ukri.org
*.dev-1.ukristaging.services.ukri.org
internal.dr-1.ukridr.services.ukri.org
esrc.ukri.org
esrc.ukri.org
testgow.epsrc.ukri.org
stfc.ukri.org
nerc.ukri.org
ahrc.ukri.org
www.mrc.ukri.org
mrc.ukri.org
sts.ukri.org
epsrc.ukri.org
dev.coronavirusexplained.ukri.org
ukri.org
reporting.services.ukri.org
ukfoodsystems.ukri.org
*.api.rap-test.ukritfsdigstaging.services.ukri.org
mrc.ukri.org
vpn.ukri.org
farminginnovation.ukri.org
engagementhub.ukri.org
*.dev.services.ukri.org
ukfoodsystems.ukri.org
san-13-s51.tlsprovisioning.exacttarget.com
san-13-s51.tlsprovisioning.exacttarget.com
gow.bbsrc.ukri.org
*.nmgn.mrc.ukri.org
engagementhub.ukri.org
eduroam.ukri.org
anpr1.mscp.ukri.org
*.innovateuk.ukri.org
energycatalyst.ukri.org
anpr1.mscp.ukri.org
uatdirectory.apps.ukri.org
*.test-1.ukristaging.services.ukri.org
engagementhub.ukri.org
vpn.innovateuk.ukri.org
nerc.ukri.org
eduroam.ukri.org
app.info.innovateuk.org
*.api.dr-1.ukridr.services.ukri.org
webhelpdesk.ukri.org
www.bbsrc.ukri.org
epsrc.ukri.org
gow.epsrc.ukri.org
eds.ukri.org
coronavirusexplained.ukri.org
re.ukri.org
reporting.services.ukri.org
yopass.innovateuk.ukri.org
*.staging.innovateuk.ukri.org
apps.ukri.org
uatdirectory.apps.ukri.org

Certificate

The complete raw certificate details for www.mrc.ukri.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6e/GnFwwuc0+eBv7Spr
hYwE6MEZZxLZ7SKB3o+ou8neRcMh5j4lnJaXuzkgB/6ywzi3BqHP65nlZEY6O9wX
rdgMehzmy4mtToHG7mMyEqsk9ZshYzpoqJnKw54NnyqRsoJY7+bBDd1NQHPGqGIp
ZiZKjDijl6idegaR0BeXfArsNx+Yiqg8lsXw02Sq+9jC16FPrB16yenRjsbugAQh
bcXYafqDE3H0ZcXx+qLqG880ghqNM1HdR495km0TOav4bnG0qe/rrSxarBDh4TPL
f3fOrdJmAZknF+3F7eKvgdpnpp5A5PiOhYUnanY66obXvUx07eew0uc/mGv5sUDX
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102406861610692626580676985971563934293
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swindon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Research and Innovation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UKSBS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mrc.ukri.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24699188349145428201139291542915448739303627514581288148937876448317095803622360888507056438822551074864456721584115149874022310742250010290972666234588212250929415916615685615809170779374098086642639544486891468003793273960256739966005166999510854905674763012396698707553841141564303035511321268736044549629487276999548901029930555493267289295138383618932939208767642884179951250773711610958383476039839736960460805711824839215290570585428987663312944410397318750473726442087783457811001392373484752288620265232166143862618479346037284917413610977214179085727208622310240083049093946988817635833857832855401335412523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b15ba7a799c1cc010d80f5571a0609a65cf1fb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrc.ukri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc.ukri.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001c18aa561d338f5d19aea50e45bbdd78da0b4ad7158afc6acf6331c779a507b6c1d4dcacd6a36bc1a42d12f472090dd48e90ca952ded62973546ae7f6e0b373a8cf3ce031e491e5f75623992936c6f76a7f290c2ef60839cc015e95c6abbdc9f626f634623cbc5a6281c0abffbd487cc140bdef7e1078f5025afe88205a71bf230d3fe0a495d4952a1b422e4a56898c26d533f99895ad5f61bd7bde87986212ff0caf24c5a809a7bb352f3ca540390269acfe7d6c844b2a7083c6a5cea563bacd07587d5f29a2889c90c70299533536293dfb69153de412c430f7e6b3cdd03bcb1ed26b7f6edacdbf9d28abe974ddfaa4a96f82223e400e27755ce66956942b561b10a779b1cd74b0a776963c51368bb3cfba49e170962dacf1976a92d2227044412b4d2ada260aa05e9d79eb72c67cfc80e250769e0e7944b6343b263acce547ff59aab9ab6a63e8b88aee8d34b3b28c3258d40c6a4b610692339af540a35058336ab6b192bdd67ce185f7ee5985ebc18b268bdf7c8c10e16e1dcdb71f0bf010c5cd51686a1bd4d0aa83027f0027ef1078c99888f5e1c765e01071324dc5cb0dfbca029534a5575ae68ce4e4272e4130a5f2642ab7abff68539cb4b586ae75c654ed3a63956af066e7d46790a6d07d1cae80b7aa35b72cc1c6440d0920fd0382fe0f171769b1ea3e67a3bfd79f1d6b05616bea60b03d3849e4bb49a4f8b07ba