ast-backend.avi.deltares.nl

- Stichting Deltares -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 8e:76:78:e0:32:48:72:6a:ab:46:f5:96:cb:2f:9a:ee was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Deltares

Organization: Stichting Deltares
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 8e:76:78:e0:32:48:72:6a:ab:46:f5:96:cb:2f:9a:ee
Serial Number (int): 189365518082587838475724943297099045614
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d7:cd:ed:4c:2b:05:f1:20:d7:10:88:78:3d:73:b6:a4:f5:7f:d3:94
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b0:a0:3a:46:f4:ed:38:3e:d4:33:aa:b1:f7:1a:fa:1a:3a:40:b1:ba
Fingerprint (sha256): 1b:f3:d7:82:0d:f3:7c:2d:b0:fe:36:11:a1:9e:70:bb:a8:41:29:1b:cd:4a:66:36:a7:32:5f:d0:cd:2c:1f:12

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ast-backend.avi.deltares.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ast-backend.avi.deltares.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ast-backend.avi.deltares.nl
ast-backend.deltares.nl

Other certificates including the domain name deltares.nl

(limited to 100 certificates)
repos.deltares.nl
al-ng027.xtr.deltares.nl
va-mac099.domain.deltares.nl
glowasis.deltares.nl
sip.deltares.nl
issuetracker.deltares.nl
al-ng018.xtr.deltares.nl
svn.oss.deltares.nl
facilities.xtr.deltares.nl
shop.deltares.nl
circle.deltares.nl
issuetracker.deltares.nl
vcenter5.xtr.deltares.nl
iraqwatercrisis-iom.deltares.nl
tl-ng010.xtr.deltares.nl
oss.deltares.nl
*.deltares.nl
waterloupe.deltares.nl
tl-ng023.xtr.deltares.nl
testbuild.deltares.nl
oss.deltares.nl
webmail.deltares.nl
agenda.deltares.nl
svn.oss.deltares.nl
mail.domain.deltares.nl
waterloupe.deltares.nl
onlinesoftware.deltares.nl
tl-tc028.xtr.deltares.nl
crucible.deltares.nl
careers.deltares.nl
workspace.deltares.nl
al-ng007.xtr.deltares.nl
workspace.deltares.nl
issuetracker.avi.deltares.nl
meren.webservices.deltares.nl
ftp.deltares.nl
gds.avi.deltares.nl
v-web002.avi.deltares.nl
tl-ng012.xtr.deltares.nl
tl-ng045.xtr.deltares.nl
tl-ng018.xtr.deltares.nl
softwaredagen.deltares.nl
v-web002.deltares.nl
ast-backend.avi.deltares.nl
aw-tc005.xtr.deltares.nl
publicwiki-tst.deltares.nl
mail.deltares.nl
v-web002.deltares.nl
build.deltares.nl
al-ng043.xtr.deltares.nl
circle.deltares.nl
opendap-matroos.deltares.nl
al-ng018.xtr.deltares.nl
modeldata-nhi-data.deltares.nl
shop.deltares.nl
www.riverlab.deltares.nl
globalmodelviewer.deltares.nl
dw-oc002.xtr.deltares.nl
oss.deltares.nl
tl-ng044.xtr.deltares.nl
covadem.deltares.nl
repos.deltares.nl
tl-ws005.xtr.deltares.nl
intranet.deltares.nl
tl-tc030.xtr.deltares.nl
intranet.deltares.nl
tl-ng029.xtr.deltares.nl
pl-036.xtr.deltares.nl
content.oss.deltares.nl
fewsfoentest.deltares.nl
al-ng009.xtr.deltares.nl
tl-tc029.xtr.deltares.nl
publicwiki.deltares.nl
sip.deltares.nl
build.deltares.nl
tl-ng017.xtr.deltares.nl
vt-mac099.domain.deltares.nl
al-ng009.xtr.deltares.nl
www.deltares.nl
zabbix.xtr.deltares.nl
spacewalk.xtr.deltares.nl
intranet.deltares.nl
touch.deltares.nl
www.deltares.nl
dl-ng009.xtr.deltares.nl
www.deltares.nl
glossis.webservices.deltares.nl
acceptatie-intranet.deltares.nl
tl-ng042.xtr.deltares.nl
publicwiki.deltares.nl
modeldata-nhi-data.deltares.nl
opendap.deltares.nl
uaewqps.deltares.nl
tl-ng032.xtr.deltares.nl
al-ng025.xtr.deltares.nl
repos.deltares.nl
al-ng005.xtr.deltares.nl
aw-tc003.xtr.deltares.nl
uaewqps.deltares.nl
accounts.deltares.nl

Certificate

The complete raw certificate details for ast-backend.avi.deltares.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ha1+wLU8VAMad7B/x0u
DLHoJifobaN3HVdmDI3K0mxSZQD1784n61SqAMwT5dvL/ujK0npWfy7TM3hzyscN
TXMRJU82ZS9/VNdH8cUbZtqPC8DXHCFtclavNcWccuDbE7PLpwa73+O3Roed/yCe
rZBomZqRBoYg8DSExoIEBbwK4sIe2rr1RtX1454mt1AzQzoTbomTvtqHxUajYIwS
g1agxCqMNx5SGovG++gu8D699HkxgtxznNiebB6hDjUY47a8xx0xVCZanjkKwxIv
RYz12n519hhmT19DiNYtiD36HL3EMae9PIWLxefQ4vFi71yKueIbnq97tmZAezi+
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189365518082587838475724943297099045614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Deltares'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ast-backend.avi.deltares.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29850778479493823170640852776599281235851614812855078539459271231818765900881093622238313834157844683186404523479094072520942354454148436266746354810328056145756580780446539754166759782912180325746570406790956592485685801690015760121398234249874170128843616189220726580410297285314616751574481832250780524043911069432515664903069531443082198687033740770843942561486039111799536305760932602456508149727915359917955843257740786876988407275671595519131875406659557908570852727935697296853617626871595777859720931878101820634201087191027958384386232817691448330842816385062376903793924442695619821120875830577272408555259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7cded4c2b05f120d71088783d73b6a4f57fd394
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ast-backend.avi.deltares.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ast-backend.deltares.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00989816f1dd893703f1aeba1d32973a881752f1d4d7802dd67b09c6d3962fab84f7ae3abe0644d108eb3b793c6b2b0ff7f56d964cacda7313cdb4c343f51a5f4ef5e9588488efc27e3a2e150677de4be234c0cd2ac2f7aa5190c2c749135661f1f97fb26bdbbe384a776c330f6ab822b49f563f3805643913396ffa3165a379f91e3f4e4702c99eb4eca3e0459a23345b890460cd2d58695b047a06786f776a1d43fc7599b309e4ad987e0301eefdb0900ddf685fbfc22f12b02dd9982e739871500105ab7f41b77e4187f56d55743ba00e5abae8ee8ba81c1257ef7465a11d9a66fcc7541c8a34fdf98037eb6f874d1dd0d102ca361de3034979cddba6e35b20bcd8a35e1f4ff210b3f63d929f52c403180f12e96b13b099055b18acbe8f778bedee7f109e252b99f5a1e34699d28a92b440d694fa77948a61622c7af8448e802d07da22287816117f226781f342bb924337752eb0a9a9986287bbd2673b44c4a9e42645f4b435198f524998ae098340d184386fe392a0f019f44025c4f090920d7c09b96244eff2772e727765871a6d0ea3ba5a011d22236fffa17332ba1b66580d67742b88264bc837b5f243eca2d4fb68901ad497074b4e8343f471c84cb5a3719d170b721ad148d423c339284b551e6341625391d87fe3642769b51ac5ebeb52796b591687392dadbcd0fd65e0ea4238a27c9c745369699e1da9b73d80cf