rws-fnstaging.jasper.com

- Cisco Systems, Inc. -

Issued by HydrantID SSL ICA G2

About this certificate

This digital certificate with serial number 1d:22:5d:95:f8:bf:74:02:9f:01:d2:91:3c:29:73:3f:fd:cd:3f:76 was issued on by HydrantID (Avalanche Cloud Corporation).

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Cisco Systems, Inc.

Organization: Cisco Systems, Inc.
State / Province: CA
Locality: San Jose
Country: US

HydrantID (Avalanche Cloud Corporation)

Organization: HydrantID (Avalanche Cloud Corporation)
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:22:5d:95:f8:bf:74:02:9f:01:d2:91:3c:29:73:3f:fd:cd:3f:76
Serial Number (int): 166327110165948336934162535985860948504081153910
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 01:3c:c8:79:a4:ca:80:3d:45:e1:79:d9:33:c0:d5:76:22:df:20:1a
AuthorityKeyId: 98:6a:b6:2d:2e:bf:a7:aa:9f:f6:f7:d6:09:af:d5:8b:57:f9:8a:b7

Fingerprint (sha1): 69:3e:72:e4:68:98:3c:0c:68:2a:f5:ec:9f:7e:b2:b2:7c:f0:4a:18
Fingerprint (sha256): 18:7c:d9:0f:8d:46:d6:72:ea:f9:c4:71:ea:fd:a9:7c:59:2d:9e:4f:c9:6c:ce:0e:2d:51:e1:eb:ad:6f:57:87

Issuing Certificate URL: http://trust.quovadisglobal.com/hydsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/hydsslg2.crl

Check the revocation status for certificate rws-fnstaging.jasper.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rws-fnstaging.jasper.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
IPSEC End System
IPSEC Tunnel
IPSEC User
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rws-fnstaging.jasper.com

Other certificates including the domain name jasper.com

(limited to 100 certificates)
cc6.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
bp890869.saagie.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc20.status.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc6.status.jasper.com
cc3.status.jasper.com
*.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc19.status.jasper.com
*.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc20.status.jasper.com
bare-metal-servers.status-ovhcloud.com
*.jasper.com
cc3.status.jasper.com
api.line-status.info
cc20.status.jasper.com
api.line-status.info
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
api.line-status.info
bb2status.mambu.com
cc20.status.jasper.com
cc6.status.jasper.com
atl-ntct-nsa-01.i.jasper.com
bp890869.saagie.com
cc6.status.jasper.com
cc7.status.jasper.com
api.line-status.info
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc3.status.jasper.com
cc19.status.jasper.com
api.line-status.info
cc20.status.jasper.com
cc6.status.jasper.com
cc6.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
api.line-status.info
ATT-NTCT-DGM-01.i.jasper.com
atl-ntct-dgm-01.i.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc3.status.jasper.com
bp890869.saagie.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
api.line-status.info
cc3.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
rws-fnstaging.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc6.status.jasper.com
cc19.status.jasper.com
rancher-staging.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com

Certificate

The complete raw certificate details for rws-fnstaging.jasper.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsQKApqF3EJi3EO5BHLU
BiVxRxMNeXG04Qz5EvoAFubUul/+UH8s03emc7DPZntej2dFJKaxedg/ivaqquOU
JzPjjovuv/NkCCoa2YCROLYCAyKKOwUVFUcPOJeBUlqi2xtEuJ0NGYT58V8Bbbup
fWz0vYU6ygaShOH4m/Vd2tMceYa2vR9rqASbkhQJY5CPsoKNwf6VQT9KMkHZ2vkH
a8n9UDsuPN+VuSQE2kzP+xuP5xmZGsxaxdujSwRtvYus8LrF9rK7mjXWdt1Pc46G
oV1IHJwmQvwAmVF9X4sDcsEYX0PfPa1fwVNingA48RHmpptvEPBesKzUCAgZwKnp
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 166327110165948336934162535985860948504081153910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID (Avalanche Cloud Corporation)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 12:55:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-17 13:05:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cisco Systems, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rws-fnstaging.jasper.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25091854867546454712347509841088719101016312926328732605964622543355773089880402647758283275282859112633246951542503394632648500990498284185660118130523627372152663578618252757983637088839867925012459862875465315896911822691511911865039435572361479715167972872623962774939527018862142864802654354105944801800757574288549978159624330050901909214706148516948900858911852954302833082377901813819193176667798390108224980382817557269996818907188121882660135455237071888650445380204987640687724239118147201924655547552220977520471736219400606291628613955964406946171107911433403524156516564489916524270763859623363950012677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 986ab62d2ebfa7aa9ff6f7d609afd58b57f98ab7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/hydsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rws-fnstaging.jasper.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.3.900.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.hydrantid.com/support/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.6 (ipsecTunnel)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.7 (ipsecUser)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/hydsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							013cc879a4ca803d45e179d933c0d57622df201a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00d9410e284b591b064df75378b4553e63e79e1e88796441de0eb289a5ef10990f2e5a43892cb9cd94b4256e747de0671435b79913aa2263c5d8ae59c34bdbb34ab409dfff683232e1f0c71b016436ba6a0a934ec5f3a5dda36c205dc54dacdd4829044d52e9bb41c09a7f640487305309724fa97ae3829706cc1b259971db0ca3dd127bd24951c0e8a2cf90af368dcb72e55eba0aca6ee7c9177d7cab43ffb8b05ef8a471377015164173b419ea68645e488e00e520a8260ebd58beec10508443e31ed7321696f0dce5874fc7d409089788d57778cdc15dee2afdbc4bdccb77b0eb4e15965162fc3025c6b8535cbad2cbda270f1d6b57f3df8db34b17fe374f7b038e368227f2670a938ab3c0227573aac6b2d870ec232617754ef8babb346f3d089e16f7c32e50c1217549d20b31988a01fb03ded3d2e270572bca4e99bfa2a8d3d0ed9bd01966d97f6629595e883e258f4d7f0c1dbbd2003d1013806deae2795312a05c217a61862f812431a38df9b4b6619c69285c794d7debe824991dd7e38039da47458732e136919c8bdff58a156d171ac866166869acebe2a73f7575e31960965cc78a455bf53980a38e4a2ab35bf2c04a800c10cd8dfd1d4550643d06c7c716cb9b766378813374f11182ea21f205586d3d1de924ec4562fadb04a3b0bc0a090736af102bdc38d02d4ec4ffa8df2b094db5e4bad1bf3b264ee810a7f6