*.telethon.it

- Fondazione Telethon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number c9:94:21:a7:9d:a4:b8:24:c1:ea:21:fa:01:bf:be:5a was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fondazione Telethon

Organization: Fondazione Telethon
State / Province: Lazio
Country: IT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): c9:94:21:a7:9d:a4:b8:24:c1:ea:21:fa:01:bf:be:5a
Serial Number (int): 267943969687239585299812728748436864602
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5b:94:7a:a1:a5:86:76:a9:b5:7e:e2:41:08:13:6d:44:47:22:40:82
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): a6:be:73:60:22:e0:9d:0f:ac:27:b7:fe:93:67:fe:ca:b6:34:8c:70
Fingerprint (sha256): 1b:97:24:fe:83:6d:ea:80:86:35:86:e4:c6:06:f2:54:19:a5:04:a5:1e:3a:be:02:12:d5:f7:f1:60:88:6d:89

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.telethon.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.telethon.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.telethon.it
telethon.it

Other certificates including the domain name telethon.it

(limited to 100 certificates)
sip.telethon.it
ssl371104.cloudflaressl.com
ssl6619.cloudflare.com
aws.telethon.it
ssl382108.cloudflaressl.com
sni.cloudflaressl.com
*.telethon.it
standrewsgig.com
ssl382108.cloudflaressl.com
ioperlei.telethon.it
calidad.appsiste.co
sni.cloudflaressl.com
ssl382108.cloudflaressl.com
sni.cloudflaressl.com
biobank.telethon.it
sni.cloudflaressl.com
sostieni.telethon.it
ssl6619.cloudflare.com
sni.cloudflaressl.com
ssl371105.cloudflaressl.com
www.extralayer.org
sostieni.telethon.it
ssl382107.cloudflaressl.com
sni.cloudflaressl.com
ssl382106.cloudflaressl.com
ssl149294.cloudflaressl.com
carlosgomez.xyz
ssl149293.cloudflaressl.com
ssl382108.cloudflaressl.com
ssl371105.cloudflaressl.com
cerbero.telethon.it
*.telethon.it
inutri.com.br
sostieni.telethon.it
ssl382107.cloudflaressl.com
ssl149294.cloudflaressl.com
ssl371105.cloudflaressl.com
ssl371103.cloudflaressl.com
ssl371105.cloudflaressl.com
ssl6619.cloudflare.com
grazie.telethon.it
ssl6619.cloudflare.com
sni.cloudflaressl.com
ssl382106.cloudflaressl.com
sni.cloudflaressl.com
ssl149292.cloudflaressl.com
www.comicandmeme.com
www.kids-planet.it
pyck.it
ssl382107.cloudflaressl.com
ssl382108.cloudflaressl.com
ssl415596.cloudflaressl.com
sni.cloudflaressl.com
ssl6619.cloudflare.com
ssl382106.cloudflaressl.com
skrap.press
ssl382108.cloudflaressl.com
ssl371105.cloudflaressl.com
ioperlei.telethon.it
ioperlei.telethon.it
ssl382106.cloudflaressl.com
ssl382107.cloudflaressl.com
sni.cloudflaressl.com
www.henglayrestaurant.com
ssl6619.cloudflare.com
ssl371105.cloudflaressl.com
sni.cloudflaressl.com
ssl371105.cloudflaressl.com
ssl149294.cloudflaressl.com
ssl149292.cloudflaressl.com
www.telethon.it
biobank.telethon.it
sni.cloudflaressl.com
ssl382107.cloudflaressl.com
sni.cloudflaressl.com
ssl6619.cloudflare.com
sni.cloudflaressl.com
ssl6619.cloudflare.com
ssl149292.cloudflaressl.com
ssl415594.cloudflaressl.com
ssl6619.cloudflare.com
sni.cloudflaressl.com
ssl371104.cloudflaressl.com
grazie.telethon.it
cw-test.js1.me
ssl6619.cloudflare.com
sostieni.telethon.it
sni.cloudflaressl.com
ssl149294.cloudflaressl.com
ssl371105.cloudflaressl.com
ssl371105.cloudflaressl.com
ssl6619.cloudflare.com
projects.telethon.it
sostieni.telethon.it
dona.telethon.it
sostieni.telethon.it
ssl371105.cloudflaressl.com
ssl382106.cloudflaressl.com
ioperlei.telethon.it
ssl382106.cloudflaressl.com

Certificate

The complete raw certificate details for *.telethon.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YjJn3qL6HBbatXZyfO9
VwIWLY/UVvPtLv7H7+hoM6LOfNnXhPrYh5AMbkQSJs3+/7SOc5zAUSh/tA+HW9HS
zkxv/zXyCN1bs5OkecD/GPb0NbEvceuKFYFKpo/mZIog4cSfDHnxRYJqWSVr69KQ
7Pd9vptmsP0dwh5/3vXBna+GaPVHBoD9e9bAB3xLcerIa9YCoFCkXI4SUfUsG25r
px2bsvFQihDfLHD2DDvcNxobyhHhqlBesqAGjQqQbqAPCcvMdpqDlhrQtg6k6B7a
1XV52Jz/MEplAa0W1oiW6azf52m7du0l0En+J3HW3p/an6xBwkW4MpSP1zdcCAnP
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267943969687239585299812728748436864602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lazio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fondazione Telethon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.telethon.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28471071091833300318732438344982803315383670111938654368797141029192823646626267885297627280771357706760402146943127548019494057733809272468779596328751212733271348392506667836691563457325075416858370794150832998850636055790929629049230020136047336576727773483079938556843148684939004628129213369429158157765113641743078805537968244968317478143262603270273997663130683414617942138213610229278215251818756661924563187861104609946467462468734078802059364444668249856311861680458481888820468925444983944010270787305111037278128687995714707615652828216562748031385363292934742207541481321840017276574127354914218084781829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b947aa1a58676a9b57ee24108136d4447224082
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telethon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telethon.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							016600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001879e11afb600000403004630440220314fe429243ab567f4846dbed268079cedca42d8649ab1f17618cc4d6a3dfa5b02201c58142d1b3cce241d1d256b005bb6ca957eb4d77fa4c83bec54ee7f3e24904e007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001879e11b0240000040300473045022064d89b967efac1aa94f7370a7608f010ce451dfc32497bda16f096754950bbe6022100c926b64d9ae3a47cebb1ff0e304cc66ed2ce3ce4ef21d318801d4879c3e33343007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001879e11b01100000403004630440220796ef3d37ccc67ef2fd5f04af34e2003cbd96ec5b07db299b3b1850df29c68e5022076ca9655f39c5a77e27c21a3c869fb52237851dc1141bec1b8dae7f2d0442d76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008139afd625888041409dde8f49d8db81018fbfda1b45ca67593d6b3142e56e03eb7d2a22c844c8a22963e8482aefeb0b195bcc25dc280d91480ed90400068d4e254d643ffd94b6fa1ba554950e89552f5d19f0d69633be489af77f8c794f8805edfe41e2b768f6fa3786c5177d89df3190063863330e84b7121263869e5af3f954b28e8ad9beec9fc9ea73d14bb4fd698634af3c92ec84ef95aefaeaef153ae88a632cbce40d4f7eeead1c34f055f792a184aa3d3c4f60998c5d08b85d9846800fc568d6f9bc101e69c171f90320112daffb3f0ddd430bff3fa96ef355cfcd220615fec7785985d014457edbe81727b7b9fd0427f80a1e4f2cb71b724cba51b8b3456155bad99a825797af3bceec391408b07e82f55e44d74d67d69c8c18ede050130ab9f638b482735fa77ba56badde70b9166288b93331c734d248876c50d32fbeb4e5ec14ccb4b793ad1f66c9485ccd8634c6dab1decedb03ef8eda562e5a2be2b75928f1cc96821089ff6215adbce1011fc2f056a85327a9783e4930d8ee47149823911b9078172d69c1df2eea6e750d95633fefd1211c078e0d7513917556dbfd56210bc8d96ab661001de7b7f97cbb244836148e7fcab9a0b9b11d046b6fa49799293b82ca1f8cdae14beb1b2a61b3b61fc33b23d64247e9cd884130d842ea25f00064e8bf2f0946e1a303fc587d4aa84c9bc9a6b4623f6425b30acc3c