*.nissen.co.jp

- Nissen Co., Ltd. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:e8:8b:4b:ab:7d:41:35:c6:18:c9:56:27:0c:e0:31 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nissen Co., Ltd.

Organization: Nissen Co., Ltd.
Organization unit: INFORMATION SYSTEMS
State / Province: KYOTO
Locality: Kyoto-shi
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:e8:8b:4b:ab:7d:41:35:c6:18:c9:56:27:0c:e0:31
Serial Number (int): 10512034091794947624835010977197776945
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ab:04:64:90:1e:7c:60:7c:ac:94:4e:5c:bf:1e:7e:53:2a:71:7d:7a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c4:be:ba:9a:e3:2e:1c:58:ea:93:c0:58:f2:89:f3:f2:d4:c3:7c:2b
Fingerprint (sha256): 17:84:1a:6c:0e:df:a8:e9:79:99:27:76:a3:a4:c8:a1:cb:73:1f:26:cb:fd:85:9f:a7:33:27:08:ad:a4:1a:4c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.nissen.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nissen.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nissen.co.jp
nissen.co.jp

Other certificates including the domain name nissen.co.jp

(limited to 100 certificates)
gs4.nissen.co.jp
*.coin.nissen.co.jp
present.nissen.co.jp
fs.nissen.co.jp
*.smile.nissen.co.jp
w.nissen.co.jp
*.coin.nissen.co.jp
sp.nissen.co.jp
www.nissen.co.jp
info.nissen.co.jp
*.nissen.co.jp
www.nissen.co.jp
*.notification.nissen.co.jp
koiran.nissen.co.jp
gs4.nissen.co.jp
*.nissen.co.jp
csweb.nissen.co.jp
info.nissen.co.jp
m.nissen.co.jp
stg07.nissen.co.jp
*.nissen.co.jp
h.sp.nissen.co.jp
sp.nissen.co.jp
hybrid2.nissen.co.jp
kiap.nissen.co.jp
h.nissen.co.jp
gapi.nissen.co.jp
www.nissen.co.jp
www.nissen.co.jp
info.nissen.co.jp
m.nissen.co.jp
www.nissen.co.jp
h.sp.nissen.co.jp
www.nissen.co.jp
m.nissen.co.jp
stg20.nissen.co.jp
m.nissen.co.jp
www.nissen.co.jp
fs.nissen.co.jp
*.nissen.co.jp
happy.nissen.co.jp
*.nissen.co.jp
coupon.nissen.co.jp
www.nissen.co.jp
www.nissen.co.jp
gapi.nissen.co.jp
koiran.nissen.co.jp
sp.nissen.co.jp
w.nissen.co.jp
www.nissen.co.jp
hybrid2.nissen.co.jp
*.smile.nissen.co.jp
*.nissen.co.jp
w.nissen.co.jp
w.nissen.co.jp
m.nissen.co.jp
gapi.nissen.co.jp
stg20.nissen.co.jp
www.nissen.co.jp
gs4.nissen.co.jp
x.nissen.co.jp
m.nissen.co.jp
*.nissen.co.jp
x3.nissen.co.jp
m.nissen.co.jp
*.nissen.co.jp
*.coin.nissen.co.jp
wwbsll.nissen.co.jp
w.nissen.co.jp
*.nissen.co.jp
*.nissen.co.jp
*.smile.nissen.co.jp
m.nissen.co.jp
*.nissen.co.jp
*.nissen.co.jp
*.nissen.co.jp
koiran.nissen.co.jp
present.nissen.co.jp
stg07.nissen.co.jp
m.nissen.co.jp
*.nissen.co.jp
gs4.nissen.co.jp
present.nissen.co.jp
h.sptest.nissen.co.jp
hybrid2.nissen.co.jp
gapi.nissen.co.jp
gapi.nissen.co.jp
happy.nissen.co.jp
coupon.nissen.co.jp
*.nissen.co.jp
www.nissen.co.jp
gapi.nissen.co.jp
present.nissen.co.jp
fs.nissen.co.jp
m.nissen.co.jp
stg07.nissen.co.jp
info.nissen.co.jp
*.nissen.co.jp
happy.nissen.co.jp
x4.nissen.co.jp

Certificate

The complete raw certificate details for *.nissen.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgBZbZHPtze42A6EpQ6Y
ux+CmUk4X4t7R6U3frVyt9KdSyBUNQ1S5yrmY3glXrKZRUrlVcBuGYiImJ1ihv5h
0RTRWNjh2hIa8NwwBsFdbkHRQydzeLT3Rzwde0lIVobZrIlZgMHpURbyugf/NKAQ
O7tF6foeyNahg71cV4aQtXXee52TYl/HOcAHoTH9Cq7byziKwDOOoV1Ll3xyLV7q
u3c6lJe7L/K+OklCGaTSkILa8QKN93WtsTgxcObV3z3TkmhSmg/kP0kOJMkDbYG8
RBIXwJJtOQDtm4i5Skoq4wUhfLVfnhB+yhBN49S2VWHrIhdusABr1bUJX9Iw7udF
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10512034091794947624835010977197776945
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KYOTO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kyoto-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nissen Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INFORMATION SYSTEMS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nissen.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24490403423545889245719718802358067540099443925343628555676386462862826834518853044208374018133707384492022273534000907999464656549079263847249369914535670812317294505645956667305317837296713865578092076005321367841121036801581284062242636388880401640676764260384025729315769664266797229686014463816008200557403402741398528654960173412418241264088707629946198424905219718266429106445766122612241994223870920188082709202027318405611329449989109709007595619413877105996046276935762552292049412458305514931388768605208322173699010664688540114098819287507525066266064354712357258931216068578554578223188746761930816308621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab0464901e7c607cac944e5cbf1e7e532a717d7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nissen.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nissen.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00822b07befa6c2cdc137f0fbb4822f971d997dc290c88c5751b1ca711bdc0d6060068e96c264675cd9eb68ac4436b4d250119c716766776d39d4311b15521922a24d0a2647e2fe2286d4c0933be6d4576da075ebf0171d6b9dbebe8802448b64407b76da3747e2d4bd247df0e1b3516b265c0398d6dbc7e6b0152567059daa3c5d5879b30a8fef2d31b1707c188061b07fac0d2296a0168f5c292ded6a09a207ba1d09b028d95200ed5b12976fd245474ac585a01abb94a993a21fb69acd9e3c55c282a0dd08cd7434e73880a929198e30aeab62fee8624c35f3de58340f314cdbb6949f378f8620ef830333ca4a65a559ba618ac342c0b491668ec5c22f44f34