int-opus.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 24:04:63:21:65:89:39:3c:cd:d8:34:3e:7c:62:8b:38:01:1a:ee:3a was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=int-opus.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 24:04:63:21:65:89:39:3c:cd:d8:34:3e:7c:62:8b:38:01:1a:ee:3a
Serial Number (int): 205621506211042231178985367786828920821353475642
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: e5:01:90:ab:9c:fa:fe:6a:31:82:96:e2:59:25:04:1a:f3:5a:49:76
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 7e:84:b8:85:ab:34:73:dc:c7:7a:ef:3a:42:21:02:5b:4d:e5:eb:c5
Fingerprint (sha256): 19:47:ae:8b:94:07:0c:ba:24:f1:db:a9:85:41:c5:c6:e7:09:9d:98:37:c7:f8:00:20:23:ee:f5:f6:a5:94:2d

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate int-opus.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for int-opus.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int-opus.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for int-opus.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmpM8281uWfvD+xrilzTy
6+L2jlmdxnF7TEeZRq4Qmb/OFthqNLFVpeWVPC2RIBgKHf/CjGNcHscgVTDKXsN/
E+Fg818XIVpoZL44Snp6zaJDthW7h/bZdgkYa+TEhLjZFmvCXZI20hDtw55udtGh
3Lo1tXvsNr1ppC43zOChh/3bonZ2If9gm9b+jm/xDC+FZ+tXZsNFXB+6m/cKHD52
REt9qQV10w891Up8bIFm3x1Vyr1D/Ups4UKVNAphcJuExi0F9MfUHnRU4/d3ftlw
Yw7eRR3q2QMBh62kZSkkP0qWZKZZX/1zpWsftdJs7CN+6geOMcBxBxwLMSvovIvd
tGQ2E9Nk4URO9jrgigp2uuQqX/PAFQBUjqIz8mCwFv5czXkrjc+hjOy+21JJZdgv
SsRjhZTJhoWUpiI5Aj/lA4y1pwDjIm3RTXPuKnTA2DB0na882ZDQx874MF5sHLDF
7VsCLC9Txw6pf9V29nN1WAzZa47OcTJU7EshLUlJC1xLHhSQYEZpvrViaD4IWY+z
Z0dRH7iKRggrGN3y7vuVJUw9d6nytR0Ai/U59XIoTvEMkv34I7J7QcGGuzHlLsl7
qCADLcyuHRC8utTUmxVCP57NaVqwFycUJrQGq5+ccMpKV2k3xp79ai3QcRc+bwP3
yIWTZbS2lUHetEinSHS/nEECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 205621506211042231178985367786828920821353475642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 07:40:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-28 07:40:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-opus.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630611583066408109518072483922130332244788520927269779076051380952196064016432946164208842301872318965765209913873675787715764137619208389154065644749703933522184060669942578412148855050437133281113524572000733647920371391002115054029306911830769274040484732402798972273396056233505415419383831407795809392187394342093529998712025841337219300084418749654626704792448902614509140545128326273009983831756601138996294005244348591449486931810513800341497627978369674444380023615289819870868301037990025829746684455253520809175148887149780003514384900096280992877910804722253663992696993810809134086142187708983285219213613866394717506295207821197239305253735827348601749943719496056285484124985911743388490875178505115255623030331605759586228819661705042305285995869648373520976038340162926492951439878228952332102556200399687684715549417846739486037007480962182982878501894358022762596062260152534905099065917379592446657273187816391187179087866022696583044250758644645714362970266694862169279208369150986524940949198851152295764295839667739835464262750451887706699385207184849061482780026698745230130154862361418303128422399469996133192305034454879674367755548175003386314991954069236302730718439748685928789872630693288315816024972353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-opus.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e50190ab9cfafe6a318296e25925041af35a4976
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005d17ec35967de615fa66c655fb8cd3e767558709f5f0433cd46460b2d615d1056bac0e8a777cdd3c42fc5d8f594890413ea72e70b8d4bd2221a927def7f43f5494dcc78d2bf36a32db94f7f687b8b94ac4938339aea96307b8d157d29bc9004215a179eb6510c5e1a3998d424183567307949c3243214d336416b1c3ce81d0cf750c5ac33ad557b9a2ec122352e7c0b13e10d7c0b1aaca3d40640eebc8315f51d65ee75335c602b17c90f30f9a869b4e3b38e97e9218e0160276e653786f7e3911bbfef9246dbbfddc7704d9c08ca4ca3dfdb57a31b0ebe436f5f5327a822ffe2c36aceba2f9baf3ae1b22df9902ce7bbc297360b146110ffefce743f93f1797396e3b98bc2f025b3b5038340678b59e899571c7cc12ce24ecfed85c06dbbeb41ae2de3cbbcfa6f0a1188f3d5497d9211af7dce58de0e3406b8f52d261cee1920021e7b08bd2d69f9989faf59d649ae42892e29d558a80782ee842e2dfedced6bfffa5dc2f3fac8c8b954b6788838dc7a7411d1b110eac218b161e2f7703935e4efe7237ccf679e9546bb41336bb4cd6e713b7a69e6858444d226b70f987295ed396ef8d3ec5662a7d9d33e79faa2900a574bdf9d98d74f0457ac55c15389537f3ed9e1d873f3944b805b5237e5e8ec064d3ce9de59122c642e28fb198679feb70d117eaf6311eb69f6542ac3a75e9be0595652b12190aa890e1d4c54a63c010